Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1EA614119D8C4296F0083D2CAE656FA0569D6807EC2C7A7010BFC426F33C7DC8D491A0E |
|
CONTENT
ssdeep
|
96:Pa2G4qyTYYbuBlu+NNumnu2PsuS93kE/SNUUK14VSf:SSqysYbuBlu+Tumnu2PsuSSE/SNU114Q |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
f4e7cd9c10e3341c |
|
VISUAL
aHash
|
fefce0e0c0c0e0c0 |
|
VISUAL
dHash
|
00000c0c30040000 |
|
VISUAL
wHash
|
fefce4e0c0e0f0e0 |
|
VISUAL
colorHash
|
07000038000 |
|
VISUAL
cropResistant
|
00000c0c30040000 |
• Amenaza: Estafa de inversión en criptomonedas
• Objetivo: Inversores de Crypttex
• Método: Suplantación y portal de inversión fraudulento
• Exfil: Credenciales/datos de pago a través de formulario /login
• Indicadores: Dominio extremadamente nuevo, promesas de alto rendimiento
• Riesgo: Alto
The site lures users to input credentials on a fake login page to hijack their accounts.
Promising unrealistic returns to trick users into depositing crypto into malicious wallets.
Pages with identical visual appearance (based on perceptual hash)