Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T10BB133622341DD2F456792E2B736736A23B79284DA4B031895FDD3681FD9C4AEC3B4C8 |
|
CONTENT
ssdeep
|
96:TkYih1R+AiykJLoWK3RzkHoB9me2MoTI0S:YYijR++kloWK35kHoB9me2MoTfS |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
96c9363469966dd2 |
|
VISUAL
aHash
|
00783c787c026604 |
|
VISUAL
dHash
|
d4c161ebe8c4ccac |
|
VISUAL
wHash
|
6af0bc7c7e046e06 |
|
VISUAL
colorHash
|
31401008000 |
|
VISUAL
cropResistant
|
e4f43238e4a1a1e0,d4c161ebe8c4ccac |
• Amenaza: Phishing
• Objetivo: Usuarios de Netflix
• Método: Suplantación de identidad mediante una página de inicio de sesión/registro falsa.
• Exfil: Dirección de correo electrónico.
• Indicadores: Alojamiento gratuito, logotipo de la marca, campos de formulario.
• Riesgo: Alto
The attacker aims to collect email addresses, using the Netflix brand to make the form more convincing.
Pages with identical visual appearance (based on perceptual hash)
Found 2 other scans for this domain