Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T16ED217CEB592312213B7B07192BF270B333761975806C4A8B66E97C05FA85CEA113F6D |
|
CONTENT
ssdeep
|
384:jd19AIOcVmcQmKriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ6P:D9AV8m3mDijgSWuanfJ6P |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b333cccccc8c3333 |
|
VISUAL
aHash
|
ffc7c7e7ffe7e7ff |
|
VISUAL
dHash
|
f34d4d4ffb4d4df3 |
|
VISUAL
wHash
|
070707070f27677f |
|
VISUAL
colorHash
|
07202000003 |
|
VISUAL
cropResistant
|
f34d4d4ffb4d4df3,aeb6f8383858180c,b3b3636363616323 |
• Threat: Phishing attempt with potential data harvesting
• Target: Users in general, possibly seeking financial assistance
• Method: Luring users to verify their situation on a newly created domain
• Exfil: Unknown, likely to a custom API or database
• Indicators: New domain, generic language, vague call to action
• Risk: MEDIUM - Potential data theft or scam
Pages with identical visual appearance (based on perceptual hash)