Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1A92138749110C856018253857BB12649B7828346EA171E4825F6876D1EF5D97CC2E4A5 |
|
CONTENT
ssdeep
|
24:nfCLBADenvFZoZJjiMfpRgl7Xo3hOvWotwa:ngBIenvEZViMfEt4m1 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
f81ffa150af007f0 |
|
VISUAL
aHash
|
c0c000000000c0c1 |
|
VISUAL
dHash
|
2000400000609015 |
|
VISUAL
wHash
|
f0f0f0f03030f0f1 |
|
VISUAL
colorHash
|
38000000e00 |
|
VISUAL
cropResistant
|
aaa298cdcd8ca2aa,2000400000609015 |
• Threat: Cryptocurrency wallet phishing
• Target: Ledger users
• Method: Impersonating the Ledger website to trick users into entering credentials or seed phrases on a fake login page
• Exfil: Likely exfiltrates credentials or seed phrases to a malicious server
• Indicators: Free hosting on vercel.app, mismatched domain, Ledger branding
• Risk: CRITICAL - Potential for immediate theft of cryptocurrency assets
Pages with identical visual appearance (based on perceptual hash)
Found 10 other scans for this domain