Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1FB22B76190AA5D3F021782E8ABEA7F1367A7C746C6D20129C2FD97CD0FE9D50DA13528 |
|
CONTENT
ssdeep
|
192:nntKc1WzPnSMnRumGqnR4Y06GY4tc4t7es73o2hH:ntne//nRumGqnR4Y06GnV1ZzoeH |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
e3339c62920e9dd9 |
|
VISUAL
aHash
|
e7e1e0e1e1e1e1ff |
|
VISUAL
dHash
|
0f4f534d4d4d4787 |
|
VISUAL
wHash
|
e5e1a0a0e1e0e1ff |
|
VISUAL
colorHash
|
06200030000 |
|
VISUAL
cropResistant
|
0f4f534d4d4d4787,8080c0d0d0808080,808080c0c0808080,1b19471b19191a5a |
• Threat: Credential harvesting phishing attempt targeting SwissPass users.
• Target: Individuals using SwissPass, likely in Switzerland or those accessing SwissPass services.
• Method: Presents a fake login page to steal email addresses and passwords.
• Exfil: Unknown, likely exfiltrating credentials to an attacker-controlled server.
• Indicators: Mismatched domain name ('cinzia.sviluppo.host' vs. SwissPass), login form requesting credentials.
• Risk: HIGH - Immediate risk of credential theft.
Pages with identical visual appearance (based on perceptual hash)
Found 1 other scan for this domain