Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T195323DB4C969E5770292B1E4D3761BE93FC18242C6638B1863F8834D6BD9D4BCD23A34 |
|
CONTENT
ssdeep
|
96:nsxY1dYJsLZAtoq7EI35Epy3xwWMVPcQ4iwWMVPcQ4iwWMVPcQ4iwWMVPcQ4vnH2:sO1+JXaaavlKFFyXUReTQSlDKlKm |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
fb5bd1c64c870543 |
|
VISUAL
aHash
|
00000099b9ffffff |
|
VISUAL
dHash
|
f85b5b2b2b2b2b96 |
|
VISUAL
wHash
|
00000089b5ffffff |
|
VISUAL
colorHash
|
06000040203 |
|
VISUAL
cropResistant
|
fe80a0c0c0a080fe,868c99f8d8d1c3ce,72f0e0e2cccc9999,5b5b6b2b2b2b2b97,2c2c96599b5c5e4b,c1385b5b5b2b2b2b |
• Amenaza: Sitio de phishing que suplanta a Amazon
• Objetivo: Clientes de Amazon en todo el mundo
• Método: Sitio web falso de Amazon para engañar a los usuarios
• Exfil: No se detectó formulario, pero probable recolección de datos
• Indicadores: Hosting gratuito, dominio no coincidente, sin SSL
• Riesgo: ALTO - Posible robo de credenciales
Pages with identical visual appearance (based on perceptual hash)
Found 2 other scans for this domain