Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1F0A1BBB0A042F93300E6C6D5EA365BCFA6C4D294DF53470613F4C79C9ADAE4AED62409 |
|
CONTENT
ssdeep
|
96:n2VJFDdfDHp1041N0m7X2+UpmYIR7gi8EWZX9knOLOGW3NxQvzWLE/WopOwluSgt:2nFhrnIEWZX9knOLOGW3NevzWLQWopOl |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
8e19394ed4c94f4e |
|
VISUAL
aHash
|
000b01ffb430ffff |
|
VISUAL
dHash
|
72dbdf9464656555 |
|
VISUAL
wHash
|
000301ff30b0ffff |
|
VISUAL
colorHash
|
07207000000 |
|
VISUAL
cropResistant
|
8282e2eaeaa28282,dbdf9be46565a555,63db1adbdbefbd9e,d9e6766663697926,4c9736666d595932,adccd9b3b7b7beb6,616c6c5e1e7e7e7c,1d06028602029a9a |
• Amenaza: Sitio de phishing que suplanta a Amazon
• Objetivo: Clientes de Amazon en todo el mundo
• Método: Sitio web falso de Amazon para engañar a los usuarios
• Exfil: No se detectó formulario, pero potencial de robo de datos
• Indicadores: Hosting gratuito, dominio no coincidente, sin SSL
• Riesgo: ALTO - Potencial de robo de credenciales
Pages with identical visual appearance (based on perceptual hash)
Found 5 other scans for this domain