Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T19E7163306460202A17570EE9B5F6AF0E35ABC34DCA43142477AC93E11BFBFB4DD26264 |
|
CONTENT
ssdeep
|
96:TqZeEF8CeJke4Nbt6lS4I0sjM+35AuoEgU5GM:2eEmENYlSuyvp2EgUf |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
99b3e7c96c662219 |
|
VISUAL
aHash
|
ffff3e1818181800 |
|
VISUAL
dHash
|
f8f8f8b0b2b2b28e |
|
VISUAL
wHash
|
ffff7f1c18181800 |
|
VISUAL
colorHash
|
13c00008000 |
|
VISUAL
cropResistant
|
e0e0f0f0f0f0f070,b2e0faa0333380a2,f8f8f8b0b2b2b28e |
• Amenaza: Phishing de credenciales
• Objetivo: Usuarios de Microsoft
• Método: Suplantación de identidad mediante página de inicio de sesión.
• Exfil: /landingpages/ac5c9c07-fe9d-4dc8-9780-8ff30d1206d7/xsk53psqbrcsbx3tbjydsemzmjllzd0jtppsqfgavio
• Indicadores: Dominio no coincide, envío de formulario a URL sospechosa
• Riesgo: ALTO
The attacker is using a fake login form to collect the victim's Microsoft account credentials.
Pages with identical visual appearance (based on perceptual hash)
Found 10 other scans for this domain