Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T16DB15371C05A293BB907C1D8B1B0EB0A32D3534EDB82096582FD027A27CFD51F91A9D6 |
|
CONTENT
ssdeep
|
96:FuwZ56S8LUfANuZsdFYTYcBZbEYTPdp2sclMSTfni1EdvB:v6SJouZs3kBNTPdp2sclFDnx |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c89c05db3e63c336 |
|
VISUAL
aHash
|
ffffffffdc280000 |
|
VISUAL
dHash
|
f2b2ec2b21d15166 |
|
VISUAL
wHash
|
7fffffdb98000000 |
|
VISUAL
colorHash
|
0e000000180 |
|
VISUAL
cropResistant
|
f2b3b2ecab2b35d9,8c6cacdcd86a7e5c,f87e7f7ffffebdaa,2b2835d950516364,210830b2b2320c11,11043232b2300c21 |
• Amenaza: Phishing/Gatekeeper
• Objetivo: Usuarios generales
• Método: Muro CAPTCHA para ocultar contenido malicioso
• Exfil: Envío de formularios mediante JS ofuscado
• Indicadores: Código ofuscado, CAPTCHA en chino
• Riesgo: Alto
Uses a captcha wall to prevent security crawlers from identifying the malicious form behind the gate.
The logic for form submission is hidden to evade static signature analysis.
Pages with identical visual appearance (based on perceptual hash)