Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1A531BE31C0C4CDEF0A52C7D48B367B1BB2C68758D7136E0585EA47AE2B49D66CD47885 |
|
CONTENT
ssdeep
|
24:hPCcH4/u9tNG0lC9HXHJbqPHXHJaVY62DQAfABZFUR/2e92T6dT:hH6u9XG0lIbMaVY66QA60R5dT |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c96636cdf09c9c62 |
|
VISUAL
aHash
|
1000187e78181800 |
|
VISUAL
dHash
|
b4c4b2b2b23232cc |
|
VISUAL
wHash
|
5c6278fff8ba9800 |
|
VISUAL
colorHash
|
39c00010000 |
|
VISUAL
cropResistant
|
8cb6b68e8ea626a6,b4c4b2b2b23232cc |
• Amenaza: Phishing
• Objetivo: Usuarios de K8
• Método: Suplantación con un dominio engañoso y scripts potencialmente maliciosos.
• Exfil: Desconocido (La ofuscación sugiere posible robo de datos o redirección)
• Indicadores: Coincidencia de dominio, logotipo de la marca, incentivo de premios ganadores, ofuscación
• Riesgo: ALTO
The attacker is trying to impersonate a popular gambling website (K8) using a confusing domain, hoping to trick visitors.
Offering winning prizes and other incentives to trick users into the website.
Pages with identical visual appearance (based on perceptual hash)