Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1DD6252B258926A3B01E391D7B3B2273BB2E2868AD5D7170593FC8B8F4AD6CC0FD11415 |
|
CONTENT
ssdeep
|
384:7FkNIIipM+RUaMy45LCkLP1YubENDL6V1YDEiDH9A1YqE2D2sv9i390l:7iNIIizRIB93s0l |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c3675c393898c59e |
|
VISUAL
aHash
|
0070767f67601c3c |
|
VISUAL
dHash
|
1bc7c4cccdc77971 |
|
VISUAL
wHash
|
00707f7f7f63003c |
|
VISUAL
colorHash
|
380020001c0 |
|
VISUAL
cropResistant
|
1bc7c4cccdc77971 |
• Ameaça: Golpe de investimento em cripto
• Alvo: Investidores de varejo
• Método: Promessas de renda passiva via robô de trading
• Exfil: Envio de formulário por JavaScript
• Indicadores: Código JS ofuscado, promessas de ganho fácil
• Risco: Alto
Prompts users to click 'Activate Robot' to initiate a sign-up process that captures contact details and potentially connects crypto wallets.
Uses fake live signal feeds to simulate platform activity and create false confidence.