Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T12051FF60905AAC339113E2F866E4AB5B32C7C305C687294867F4C36C2EF3C5DDF66629 |
|
CONTENT
ssdeep
|
48:nwk6iUJhhzazzld9ITOiyXhxnYa26YXAPy9uilLM7ay6BLPHwut16:nRA8zx8+hxnZbBy9ui9MeBFPwu6 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
83f67e09890999fc |
|
VISUAL
aHash
|
3f3f3f3f3f3f3f3f |
|
VISUAL
dHash
|
d0ccccd8d0d0d0d0 |
|
VISUAL
wHash
|
3f27373f3f000000 |
|
VISUAL
colorHash
|
060000001c0 |
|
VISUAL
cropResistant
|
a09c989080808080,f184acb6b6ac84f3,0e71710e20000000 |
• Amenaza: Kit de phishing para robo de credenciales
• Objetivo: Usuarios de Outlook en todo el mundo
• Método: Formulario falso que roba email y contraseña
• Exfil: Datos enviados mediante envío de formulario JavaScript
• Indicadores: Dominio no coincidente, JavaScript ofuscado, marca no oficial
• Riesgo: ALTO - Robo inmediato de credenciales
Pages with identical visual appearance (based on perceptual hash)
Found 2 other scans for this domain