Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T153A1F01453443F4F959962B2D3602E94C3E2491EC7324D48B85EE72F2C8814AED7BAFC |
|
CONTENT
ssdeep
|
96:d3ydpvuLgNxCJlglAtyHL5Z1eQyrcb55f1SWfRPE3yDSznNyHJVwc5xyHAPbZz0B:/pQy051ns6P7iD |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
d393333199999999 |
|
VISUAL
aHash
|
4c243c3c00000000 |
|
VISUAL
dHash
|
194c686016000000 |
|
VISUAL
wHash
|
1c243c3cc0d4f0f0 |
|
VISUAL
colorHash
|
07018000600 |
|
VISUAL
cropResistant
|
194c686016000000 |
• Ameaça: Kit de phishing para roubo de credenciais
• Alvo: Usuários do plala no Japão
• Método: Formulário falso que rouba email e senha
• Exfil: Dados enviados para script PHP suspeito
• Indicadores: Domínio não coincidente, domínio recente, JavaScript ofuscado
• Risco: ALTO - Roubo imediato de credenciais
Pages with identical visual appearance (based on perceptual hash)
Found 2 other scans for this domain