Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T173C12331C05B292BF90381E8B1B0D71B62D2434ED782055592FD026A77CED50F91A9DA |
|
CONTENT
ssdeep
|
96:FuwB6S8LUfANuZsdFYTYcBZbEYTPdp2sclJnaWLlIJQ6B:Z6SJouZs3kBNTPdp2sclJnak2Qg |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
cbb427cb1c89c1b6 |
|
VISUAL
aHash
|
fff7ffffdc280000 |
|
VISUAL
dHash
|
f2cdca3329d15166 |
|
VISUAL
wHash
|
ffe7ffdb98080000 |
|
VISUAL
colorHash
|
0e0000001c0 |
|
VISUAL
cropResistant
|
f2f3ccf0b32b35d9,8c6cacdcd86a7e5c,f87e7f7ffffebdaa,336349f0595949e9,2b2835d950516364,210830b2b2320c11,11043232b2300c21 |
• Amenaza: Phishing
• Objetivo: No especificado
• Método: Suplantación de identidad a través de un dominio sospechoso con CAPTCHA.
• Exfil: Desconocido (Se detectaron formularios)
• Indicadores: Ofuscación, envío de formularios JavaScript, dominio no relacionado.
• Riesgo: Alto
The site likely attempts to steal user credentials through a login form. The form might then redirect to another malicious site or store the data for later use.
It could try to install malware using the obfuscated Javascript
Pages with identical visual appearance (based on perceptual hash)