Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T13251A52A749C705B0BA2335C3E12B7BCD72345AB4A691F463454AD4FB8E2B178C051AF |
|
CONTENT
ssdeep
|
48:TjNXLcTS5DuNX1PQ4X4C0aNWxaLCw+0k7/rmnRqccArORlsQ4Asau/k7/rmnRqcG:TFiScRjcfRB |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
ec6c9393c36c6c4c |
|
VISUAL
aHash
|
002c000230c7ffff |
|
VISUAL
dHash
|
02699696660e2e00 |
|
VISUAL
wHash
|
000c000080ffffff |
|
VISUAL
colorHash
|
07001001180 |
|
VISUAL
cropResistant
|
02699696660e2e00 |
• Amenaza: Phishing
• Objetivo: Usuarios de Facebook
• Método: Suplantación de identidad a través de una página de inicio de sesión falsa
• Exfil: Credenciales
• Indicadores: Alojamiento gratuito, logotipo de Facebook, formulario de inicio de sesión
• Riesgo: Alto
The attacker creates a fake login page that mirrors Facebook's. When a user enters their credentials, the information is sent to the attacker.
Pages with identical visual appearance (based on perceptual hash)
Found 2 other scans for this domain