Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1E702FF726504A9B30193E3E6E775E76F7686D348CA932786A2F8D74C0FC6CDACC51218 |
|
CONTENT
ssdeep
|
96:STTh7PziCvHIxhnuj1QxBO4vRlXvC+BvlPQ/4RJoTB0VSmP7ttcyJxyQP3m2:ETRbPYnu34vRlm4RJoTGPxv7 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9b9b31314e4c64f3 |
|
VISUAL
aHash
|
3cffff3c3c000000 |
|
VISUAL
dHash
|
7179696169062800 |
|
VISUAL
wHash
|
ffffff3c3c000000 |
|
VISUAL
colorHash
|
070020001c0 |
|
VISUAL
cropResistant
|
7179696169062800 |
• Ameaça: Phishing
• Alvo: Usuários do Facebook
• Método: Personificação via domínio blogspot
• Exfil: Desconhecido (o formulário provavelmente redireciona)
• Indicadores: Domínio não relacionado, hospedagem blogspot, logotipo do Facebook, modelo simples, Javascript ofuscado
• Risco: Alto
The site attempts to steal a user's Facebook credentials. It likely redirects to a phishing page after you click on a link
The site uses a Facebook logo to lure victims and a generic template. The attacker relies on users to input their credentials on this imposter site.
Pages with identical visual appearance (based on perceptual hash)
Found 1 other scan for this domain