Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T12F230A7008C96F2B159392DDA311A65BD395914CE2B6C6C9F5EEC32B4AC4D84C83FF98 |
|
CONTENT
ssdeep
|
768:DkWzzzVNsnRmH0VQj36adGgaO/zgPXCIUStwW0+LmrxB19H2hn:DkWzzzVNsnRmUVQjJoO/kfC70wWBA19w |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9414ebcacbbac896 |
|
VISUAL
aHash
|
fd0406060606fff9 |
|
VISUAL
dHash
|
71ecccccecec3b33 |
|
VISUAL
wHash
|
ff0606060606fff9 |
|
VISUAL
colorHash
|
130000001c0 |
|
VISUAL
cropResistant
|
002149717149014a,96d6e8b084710f8e,e0183b4c23731313,c4ecccccecececec,4b4b4b4bcb8b666b |
• Ameaça: Phishing
• Alvo: Investidores (potencialmente)
• Método: Engano por meio de uma plataforma de negociação falsa
• Exfil: Dados coletados por meio de formulários
• Indicadores: Ofuscação de JavaScript, envio de formulários, domínio suspeito.
• Risco: Alto
The site uses a form to collect email addresses and other personal information, which is a common method for phishing attacks.
Pages with identical visual appearance (based on perceptual hash)