Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T12073877292102437617F79D9F065771AA2D3D74FCA8256E1A2F8A39A0FD6CE1FC1340A |
|
CONTENT
ssdeep
|
1536:6UpXWn9rGQl+qwvpLE+YuOsengZz7H57Hx7HR7HF7HR7H27HS7Hp7HZ7H/7HR7Ht:jpXWMQluh4ruOG7Z7R7x7l7x7W7y7J7B |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b0475361cd98ecbc |
|
VISUAL
aHash
|
0000d3ffc3c3dfff |
|
VISUAL
dHash
|
e8c8263036263032 |
|
VISUAL
wHash
|
0000c3dfc3c3cfdf |
|
VISUAL
colorHash
|
07001010180 |
|
VISUAL
cropResistant
|
e8c8263036263032,c70b7b0587169616 |
• Amenaza: Kit de phishing para robo de credenciales
• Objetivo: Usuarios de Roblox internacionalmente
• Método: Formulario falso que roba email y contraseña
• Exfil: Datos enviados a servidor desconocido
• Indicadores: Dominio no relacionado, JavaScript ofuscado, marca no coincidente
• Riesgo: ALTO - Robo inmediato de credenciales
Pages with identical visual appearance (based on perceptual hash)
Found 10 other scans for this domain