Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T10BD3C832D110BA3711E392E956B15AAFB7C2A766D937030737F897980FDAF20DE12245 |
|
CONTENT
ssdeep
|
1536:VX5NaGq5Na455Na455Na455Na455Na455Na455Na4+:P |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
807f3f60607f7e40 |
|
VISUAL
aHash
|
003f7fff7fff7f7f |
|
VISUAL
dHash
|
c1fbf8e0c0e0e0c0 |
|
VISUAL
wHash
|
00003c3c00001030 |
|
VISUAL
colorHash
|
07006000000 |
|
VISUAL
cropResistant
|
c1fbf8e0c0e0e0c0,0101010101000101 |
• Threat: Cryptocurrency wallet phishing targeting Upside users.
• Target: Users of Upside digital art platform.
• Method: Attempts to trick users into connecting their wallets to a malicious site via claim of blockchain rectification.
• Exfil: Unknown, but likely credentials and/or funds from connected wallets.
• Indicators: Free hosting on pages.dev, mismatching domain name, claim of resolving wallet issues.
• Risk: HIGH - Potential for theft of cryptocurrency assets.
Pages with identical visual appearance (based on perceptual hash)
Found 4 other scans for this domain