Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1ADA110A61241DE2E5177C3E2B332777A23A68289DA46130484FED3681BD6D5DEC3B8C4 |
|
CONTENT
ssdeep
|
96:n4Ys1ReAt7kJLoWKjRzkHo2f9me281JfbQorn5:4YAReykloWKj5kHo2f9me28bfbQor5 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
d2c9363469966dd2 |
|
VISUAL
aHash
|
007c7c387c006604 |
|
VISUAL
dHash
|
d4c5f1ebe884cccc |
|
VISUAL
wHash
|
6af0fe7c7e006606 |
|
VISUAL
colorHash
|
31401008000 |
|
VISUAL
cropResistant
|
d4c5f1ebe884cccc |
• Ameaça: Phishing
• Alvo: Usuários da Netflix
• Método: Se passando pela Netflix para roubar credenciais.
• Exfil: Desconhecido (provavelmente o endereço de e-mail inserido)
• Indicadores: Hospedagem gratuita, logo da Netflix, campo de entrada de e-mail.
• Risco: Alto
The attacker attempts to steal user credentials (email address, etc.) by mimicking the Netflix login page on a free hosting site.
Pages with identical visual appearance (based on perceptual hash)
Found 2 other scans for this domain