Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1B4732F22680E152FB157C3C591F4FAA7DD51CE1ACE700E01DBA9EFCADA90F12B675218 |
|
CONTENT
ssdeep
|
768:khg8IZm4Ven19D7ddTZTRBYEgIasu0e+pi6czoowqeiK7:l8t4VzK7 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
86973f6968622d95 |
|
VISUAL
aHash
|
00be7e7579180000 |
|
VISUAL
dHash
|
d568ec85b3f34813 |
|
VISUAL
wHash
|
00be7f777f382801 |
|
VISUAL
colorHash
|
30000038000 |
|
VISUAL
cropResistant
|
20889898b2b5e5c5,db7aa52723a5ed2b,cf3a7b69b2b0430e,dc989892b2b8b2a6,165757529231484b,3d71c9b8dae6ef7a,d568ec85b3f34813 |
• Amenaza: Phishing
• Objetivo: Aficionados al juego
• Método: Diseño web engañoso para atraer usuarios
• Exfil: Potencialmente robo de credenciales o datos financieros (incierto, presente ofuscación de Javascript)
• Indicadores: JS ofuscado, Bonos prominentes.
• Riesgo: Medio
The site likely aims to steal user credentials through a login form, masked as a legitimate gaming platform.
It could try to deliver malware via the Javascript
v0.mjsPages with identical visual appearance (based on perceptual hash)