Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1089296679250A73E4A120399AE6B779FB367914DF68E04C4B1FBC23E51C1CA0D536CA1 |
|
CONTENT
ssdeep
|
384:PIIQnEuelKOAqyCRe0+mxgDOfdEHZqyXMzuXhSD9jAmfCG:PIIQEb9yP/m6eA8t |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b0ca42cacaceccdb |
|
VISUAL
aHash
|
fdc7c7c3cfc3c7c7 |
|
VISUAL
dHash
|
491c1e161e160e1e |
|
VISUAL
wHash
|
a5c3c3c3c3c3c3c3 |
|
VISUAL
colorHash
|
07000000007 |
|
VISUAL
cropResistant
|
491c1e161e160e1e |
• Amenaza: Desinformación, potencial de contenido inexacto o engañoso
• Objetivo: Usuarios de Ledger
• Método: Publicación de blog en un sitio web no oficial, que distribuye información sobre Ledger
• Exfil: Ninguno
• Indicadores: Dominio no oficial, contenido informativo
• Riesgo: BAJO - Potencial de desinformación, pero no un intento directo de phishing
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Malicious code is obfuscated using 24 techniques to evade detection by security scanners and make reverse engineering more difficult.
Pages with identical visual appearance (based on perceptual hash)
Found 10 other scans for this domain