Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1EC216371918C9C765D82E3B4A3F0E14B27C1C660CB1B1A401AFCDBAC9AE1D90CF246C9 |
|
CONTENT
ssdeep
|
24:hRYLBCtO8hrCYOuyZSPV+BhVLEFM2nJdMcBTx0XXJgEuuVyH6yS:TqUNZ19+B/y5nV7IJgEuuVY6J |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
cc3333cccc3399cc |
|
VISUAL
aHash
|
0000181818180000 |
|
VISUAL
dHash
|
0000303030300010 |
|
VISUAL
wHash
|
0000181838380000 |
|
VISUAL
colorHash
|
38000000e00 |
|
VISUAL
cropResistant
|
0000303030300010 |
• Threat: Phishing Gate
• Target: General Users
• Method: Human verification bypass
• Exfil: Likely subsequent page
• Indicators: Obfuscated JS, suspicious domain
• Risk: Critical
Uses a verification page to bypass automated scanners. Once the human user solves the code, they are redirected to a malicious destination.
Uses a long, nonsense string to mimic a legitimate dashboard URL.
Pages with identical visual appearance (based on perceptual hash)