Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1E0031E36A0449A3F11CB82D677B06B1EF3D6E289CA571A5A63F8C31D07C7E90CE31956 |
|
CONTENT
ssdeep
|
384:xL/tSVh1SZO+ISwB3XcxjmmD+l9PkCn+C2sY0It5jPi/tq7q:xLFSx/+ILQ8PkCJjTIt57b7q |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c689c19e99b89acd |
|
VISUAL
aHash
|
ff70000010040060 |
|
VISUAL
dHash
|
63c7e575676dc4c2 |
|
VISUAL
wHash
|
ff73311913947074 |
|
VISUAL
colorHash
|
38000000180 |
|
VISUAL
cropResistant
|
710d644343434344,0008047870702004,c6c73573652dc6c6 |
• Ameaça: Phishing
• Alvo: Usuários interessados em plataformas de negociação.
• Método: Site enganoso com formulário de registro.
• Exfil: Credenciais do usuário e possivelmente outros dados.
• Indicadores: Domínio suspeito, formulário de registro, urgência.
• Risco: Alto
The attacker is attempting to harvest user credentials by creating a fake login form that mimics a legitimate platform. This is a common phishing technique.
Using social engineering tactics like an urgent closing message to pressure users into entering their credentials.
Pages with identical visual appearance (based on perceptual hash)