Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T10A51E0314006ED2BA2D3D3F46770671FB6D68255CBA71B4696F5A3EC1EC2C4BEC2A104 |
|
CONTENT
ssdeep
|
48:nXvv+qHGigQPhPGcYQbPagPsVi/L/MOpYY/3dtTN:nX/Np+cfhU0z5Ym3PN |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
8fea8fea8b2888b8 |
|
VISUAL
aHash
|
bfb000000000003f |
|
VISUAL
dHash
|
6568b0a0a0a0aa6a |
|
VISUAL
wHash
|
bfb300000f0f173f |
|
VISUAL
colorHash
|
31200030000 |
|
VISUAL
cropResistant
|
6568b0a0a0a0aa6a |
• Threat: Brand impersonation (low risk)
• Target: Spotify users
• Method: Recreating Spotify's interface on a personal GitHub page
• Exfil: No data exfiltration detected
• Indicators: Brand logo on free hosting, domain mismatch (not spotify.com)
• Risk: LOW - Potential brand impersonation, but no active credential harvesting.
Pages with identical visual appearance (based on perceptual hash)
Found 1 other scan for this domain