Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T179715130A020257753570EE875F96B0E35ABC30FCA8718142AAC93D61BF3EF4DC1A665 |
|
CONTENT
ssdeep
|
96:nqZeEoh+fJke4Nbt6lS4I0sjM+3NuEVGM:KeEoNYlSuyvnT |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9992e7c94c661a37 |
|
VISUAL
aHash
|
ffff3e1818180000 |
|
VISUAL
dHash
|
f0f8f8b2b2b2c8b2 |
|
VISUAL
wHash
|
ffffff1c18180800 |
|
VISUAL
colorHash
|
1bc00008000 |
|
VISUAL
cropResistant
|
e0e0f0f0f0f0f070,b2e0faa0333380a2,f0f8f8b2b2b2c8b2 |
• Amenaza: Ataque de phishing para robo de credenciales
• Objetivo: Usuarios de Microsoft
• Método: Formulario falso que roba email y contraseña
• Exfil: Datos enviados a /landingpages/71b038a8-c7ef-438c-b708-a5c82c1485ab/w0wdbnslhy29xuitpzemcv4skrqefywp_uf7odmqg7i
• Indicators: Dominio no coincide, suplantación de marca, envío de formulario con JavaScript
• Riesgo: ALTO - Robo inmediato de credenciales
Pages with identical visual appearance (based on perceptual hash)
Found 10 other scans for this domain