Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1359121B312C5E5270693D2D2B632AB1BB2A3828CDD83176194FDC74C1FD9D56EC53A88 |
|
CONTENT
ssdeep
|
96:ncYK1R6jd7kJLoWKjRzkHo2f9me2RbbwuGN:cYSR6jdkloWKj5kHo2f9me2+vN |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
d2cd363469926dd2 |
|
VISUAL
aHash
|
007c7c387c006604 |
|
VISUAL
dHash
|
d4c5f1ebe884cccc |
|
VISUAL
wHash
|
2a7efc7c7e006606 |
|
VISUAL
colorHash
|
31401008000 |
|
VISUAL
cropResistant
|
d4c5f1ebe884cccc |
• Ameaça: Phishing
• Alvo: Usuários da Netflix
• Método: Personificação via página de login falsa
• Exfil: Endereço de e-mail
• Indicadores: Hospedagem gratuita, logotipo da marca, campos de formulário
• Risco: Alto
The attackers are likely attempting to steal user credentials (email address) by tricking users into entering their information on a fake login page that mimics Netflix.
Pages with identical visual appearance (based on perceptual hash)
Found 1 other scan for this domain