Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T15463757291102837517B79DAF164B71AA2D3C70FCA8256E1A2F8939A0FD6CE1FC1744E |
|
CONTENT
ssdeep
|
1536:arKXWn9rba4+dA9p8xoYuOF22Z57Hb7HD7H/7Hy7Hv7H37HE7H37Hn7HF7H37HPZ:aKXW9a4rnSVuOT777j7f7S7P7X7k7X7z |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b4164363d19cbcbc |
|
VISUAL
aHash
|
0000d3ffc3c3ffff |
|
VISUAL
dHash
|
e8e83630161e0006 |
|
VISUAL
wHash
|
0000c3dfc3c3ffe3 |
|
VISUAL
colorHash
|
07201010080 |
|
VISUAL
cropResistant
|
e8e83630161e0006 |
• Amenaza: Kit de phishing para robo de credenciales
• Objetivo: Usuarios de Roblox internacionalmente
• Método: Formulario falso que roba credenciales de usuario
• Exfil: Datos enviados a servidor desconocido
• Indicadores: Dominio no coincide, JavaScript ofuscado, envío de formulario
• Riesgo: ALTO - Robo inmediato de credenciales
Pages with identical visual appearance (based on perceptual hash)
Found 10 other scans for this domain