Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T193814430906030A7535B0DD674F57F0E39ABC38EC98B141826AC93D92BF3EB9ED15565 |
|
CONTENT
ssdeep
|
96:nqZeEo44hGYqAwke4Nbt6lS4I0swKq+3BOuC4qujGM:KeE6NYlSu/uO6 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
99b3e7c94c662233 |
|
VISUAL
aHash
|
ffff3e1818181800 |
|
VISUAL
dHash
|
f8f8f8b0b2b2b28a |
|
VISUAL
wHash
|
ffff7f1c18181800 |
|
VISUAL
colorHash
|
13c00008000 |
|
VISUAL
cropResistant
|
e0e0f0f0f0f0f070,a2e2ecbae2339aa2,f8f8f8b0b2b2b28a |
• Ameaça: Kit de phishing para roubo de credenciais
• Alvo: Usuários da Microsoft e IPCO
• Método: Formulário falso que rouba email e senha
• Exfil: Dados enviados para /landingpages/0375d35e-20dd-4e10-98d2-6bb672ce9d94/YCVR2C1RHAkzFxHMcD5ASryBmeqV6vNRoFR7yzbNz1c
• Indicadores: Domínio diferente, formulário de login, representação da Microsoft e IPCO
• Risco: ALTO - Roubo imediato de credenciais
Pages with identical visual appearance (based on perceptual hash)
Found 10 other scans for this domain