Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1C1A2FE70D18031BB819741D89F31ABAB7391C16ECB1F6D446AF9C315CF9BD08A8A0E57 |
|
CONTENT
ssdeep
|
192:+v5k6iS169YnjarUvtFkRDcNLHbF4GUUB8WBmsa6e32M69HCsjarUvtFkRDcNLHf:+v66ik6Wn2SL7Ad32M6dCs2SL7Ad34 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
92926d6969646d6d |
|
VISUAL
aHash
|
000e6e0e04000000 |
|
VISUAL
dHash
|
99ccec8c29020800 |
|
VISUAL
wHash
|
6e7e7e7e0c000000 |
|
VISUAL
colorHash
|
38e00000008 |
|
VISUAL
cropResistant
|
a4245306e4e254c1,99ccec8c29020800 |
• Amenaza: Estafa de criptomonedas
• Objetivo: Usuarios de criptomonedas
• Método: Suplantación de identidad e ingeniería social
• Exfil: Desconocido, probablemente a un sitio web malicioso o drenador de billetera.
• Indicadores: Alojamiento gratuito, ofuscación, suplantación.
• Riesgo: Alto
The site visually resembles a cryptocurrency wallet and lists potential issues, attempting to lure users into providing sensitive information or interacting with malicious elements.
The site uses a combination of fear tactics related to wallet problems to create a sense of urgency and encourage users to engage.
cdn.tailwindcss.comPages with identical visual appearance (based on perceptual hash)