Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1617263BA5338E42352E34BDEBB316719B2A3C19DCB620B0252B4970B6FD7D82CE5051D |
|
CONTENT
ssdeep
|
384:E+0AoBptKgtHeuGJuLbmw5HCzA8wHBFgihOvb0ZCW:EcoBr/tHjpSA8wHBFgihOvb0ZCW |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
e699668b99669926 |
|
VISUAL
aHash
|
ffe7efc3c7e7c3e7 |
|
VISUAL
dHash
|
0b0a0e16160c0d0d |
|
VISUAL
wHash
|
80e3c3c3c3c7c7c3 |
|
VISUAL
colorHash
|
07006000080 |
|
VISUAL
cropResistant
|
0b0a0e16160c0d0d,cca5a4a5a4a2c04d |
• Amenaza: Posible suplantación de marca
• Objetivo: Usuarios de Telegram
• Método: Imitación del sitio web oficial de Telegram
• Exfil: No se detectó exfiltración de datos
• Indicadores: Dominio no coincidente, TLD inusual
• Riesgo: MEDIO - No hay robo inmediato de credenciales
Pages with identical visual appearance (based on perceptual hash)