Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1CAC12C3B3101693B018342F2BB65AB0BFB938159DF9B0B6520F8C34D6FE6D49CC56689 |
|
CONTENT
ssdeep
|
96:T6T9d+Ff2M1rxH5X1nFBFEPht3wj2C+Ff2zzKjam:WT9dgR1xH5FFBG8j2CgUG |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
d4bd737e5823038c |
|
VISUAL
aHash
|
80c27f5f1e441020 |
|
VISUAL
dHash
|
0fa6a6b6b0ac68cc |
|
VISUAL
wHash
|
80f27fdf1e741068 |
|
VISUAL
colorHash
|
39401000000 |
|
VISUAL
cropResistant
|
8029a6c4b9d44990,2600823232320000,0fa6a6b6b0ac68cc |
• Amenaza: Phishing
• Objetivo: Usuarios de Netflix
• Método: Suplantación de identidad a través de una página de inicio de sesión falsa
• Exfil: Dirección de correo electrónico
• Indicadores: Alojamiento gratuito, marca Netflix, entrada de correo electrónico
• Riesgo: ALTO
The attackers are using a fake website that looks like Netflix to trick users into entering their email address. This is a common tactic for phishing, where the attacker will then attempt to use the collected information for various malicious activities.
Pages with identical visual appearance (based on perceptual hash)