Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T125D18C5181416D9342134BD0A737A6A676C0814ACF07491412F84BEFFAFECB8DE2E6A9 |
|
CONTENT
ssdeep
|
48:dST4OKKNbMQpBLwaB+tBiBh2DHc7DHCmDHRvDHWfXo7DH3GeRqDKXBh2DHcfb5Do:WhCeBh0eqmxhloazGmGdPOk |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
e1c336ce6193c69a |
|
VISUAL
aHash
|
e7c3e7e3c3e3c7c3 |
|
VISUAL
dHash
|
0f860c1e96868e96 |
|
VISUAL
wHash
|
c3c3c3c3c3c3c3c3 |
|
VISUAL
colorHash
|
06c00010000 |
|
VISUAL
cropResistant
|
0f860c1e96868e96,7d69696d6161793b,d494d4d4d4e4e4e4,5694d4d654549652,00a15a5e16ace50a,90709333325f170c,731233634c4e1d1f,6564c366e6e626a0 |
• Threat: Brand impersonation phishing targeting casino users
• Target: Users of Sands casino, primarily Chinese-speaking audience
• Method: Impersonating Sands with a look-alike webpage to lure downloads
• Exfil: Likely redirect to a malicious app or request credentials within the app.
• Indicators: Domain mismatch (031.cc vs official domain), offers of free credits, unofficial website design
• Risk: HIGH - Potential for malware installation, credential theft or financial fraud via the app.
Pages with identical visual appearance (based on perceptual hash)