Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T13FF0A22082140DAE8C52A2DD56C0E759DAD08508C395374929A492B5879FD99D8953CC |
|
CONTENT
ssdeep
|
12:nwMy7FUwspbTcnVctbOWNqwOW1f/lJMCLUP4CgQ:n/CQp3SVctbNNqwNKPPt |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b389cc6633996666 |
|
VISUAL
aHash
|
ffffffff24000000 |
|
VISUAL
dHash
|
210430aa4d4c3001 |
|
VISUAL
wHash
|
ffffffef80000000 |
|
VISUAL
colorHash
|
070000001c0 |
|
VISUAL
cropResistant
|
210430aa4d4c3001 |
• Ameaça: Phishing/Gatekeeper
• Alvo: Desconhecido
• Método: Portão de acesso com CAPTCHA
• Exfil: Desconhecido (protegido por portão)
• Indicadores: Domínio extremamente recente, scripts ofuscados
• Risco: Alto
Uses a fake CAPTCHA to filter bots and serve malicious content only to genuine users.
Typically follows the gate with a fraudulent login form.
Pages with identical visual appearance (based on perceptual hash)