Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1DFD3C832D110BA3711E392E956B15AAFB7C2A766D937030737F897980FDAF20DE12245 |
|
CONTENT
ssdeep
|
1536:ZX5NaGq5Na455Na455Na455Na455Na455Na455Na4+:z |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
807f3f60607f7e40 |
|
VISUAL
aHash
|
003f7fff7fff7f7f |
|
VISUAL
dHash
|
c1fbf8e0c0e0e0c0 |
|
VISUAL
wHash
|
00003c3c00001030 |
|
VISUAL
colorHash
|
07006000000 |
|
VISUAL
cropResistant
|
c1fbf8e0c0e0e0c0,0101010101000101 |
• Amenaza: Phishing
• Objetivo: Usuarios de criptomonedas
• Método: Impersonación de rectificación de monederos.
• Exfil: Desconocido, probablemente para robar credenciales y drenar monederos.
• Indicadores: Alojamiento gratuito, tema de criptomonedas, falta de marca, lenguaje genérico.
• Riesgo: ALTO
The site likely attempts to steal login credentials or gain access to the user's cryptocurrency wallet through social engineering, by requesting them to 'rectify' their wallet via malicious links.
A malicious smart contract could be presented as a 'rectification' tool, that may drain the user's wallet of funds, if they interact with the links provided.
Pages with identical visual appearance (based on perceptual hash)
Found 4 other scans for this domain