Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T146C13371C05B292BF90381E8B1B0DB1F62D3434ED7820A5592FD026A7BCFD50F91A9DA |
|
CONTENT
ssdeep
|
96:FuwE6S8LUfANuZsdFYTYcBZbEYTPdp2sclJnaWLlIJQ6B:c6SJouZs3kBNTPdp2sclJnak2Qg |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
dbb107cb3c0d81b6 |
|
VISUAL
aHash
|
ffffffffdc280000 |
|
VISUAL
dHash
|
f2caca3329d15166 |
|
VISUAL
wHash
|
7fefffdb98080000 |
|
VISUAL
colorHash
|
0e0000001c0 |
|
VISUAL
cropResistant
|
f2f3ced8b32b35d9,8c6cacdcd86a7e5c,f87e7f7ffffebdaa,7f1b3b7b597c7e7f,2b2835d950516364,210830b2b2320c11,11043232b2300c21 |
• Amenaza: Phishing
• Objetivo: No especificado
• Método: Impersonación y robo de credenciales.
• Exfil: Potencialmente a través de JavaScript.
• Indicadores: JavaScript ofuscado, elementos de página genéricos.
• Riesgo: Moderado
The site is designed to collect user credentials by presenting a fake login form. The obfuscated Javascript may be used to intercept and exfiltrate user input.
The site may be designed to inject malware through a drive-by-download or a social engineering tactic.
Pages with identical visual appearance (based on perceptual hash)