Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T16B23EA3104C42B6F52A343C5E312DA5FE3928284E276CA6AF5F6832B66C5D49CD37B5C |
|
CONTENT
ssdeep
|
768:/+noe6zTA4NYJLZQyKyTz/7WkxroOO/+nK5MCY1INkSL81+GgHEOoa7WmSwdEJOh:/+noe6zTA4y1Q8TbRroOO/+nK5TY19m1 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9414ebeacbcac896 |
|
VISUAL
aHash
|
fd0606060606ffff |
|
VISUAL
dHash
|
71ccecccecfc392b |
|
VISUAL
wHash
|
fd0606060604ffff |
|
VISUAL
colorHash
|
0e0000001c0 |
|
VISUAL
cropResistant
|
0001496161c90152,96d6e8b094710f8e,8030300d792b1b33,ccccecccccececec |
• Amenaza: Phishing
• Objetivo: Usuarios de Bitcoin360 AI
• Método: Suplantación de identidad y recopilación de datos a través de un formulario falso de creación de cuenta
• Exfil: La ofuscación de JavaScript puede usarse para la exfiltración de datos.
• Indicadores: Formularios que solicitan datos personales, javascript ofuscado.
• Riesgo: Alto
The website uses a form to collect personal information (name, email, and phone number) likely for credential harvesting and potential phishing attacks.
Obfuscated Javascript is used to hide malicious code from analysis or to exfiltrate collected data.
Pages with identical visual appearance (based on perceptual hash)