Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1734269B241495137135391E1A32E0787B7EAC65CD6934B0023FE93286FE5CA9ED633B8 |
|
CONTENT
ssdeep
|
192:GM6X5o0HlyB3f/b8XVYewOes4GAIXjL3JdJno+3K5yHXmv4LT5hjNH8N+Wbzah23:GxzkBPIYewqlRd+7AXmEE7ki |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
904e186f386f996e |
|
VISUAL
aHash
|
187e7e7e7e7e005e |
|
VISUAL
dHash
|
b0f0e0c4c8d0ccb2 |
|
VISUAL
wHash
|
187e7e3c0c7e005e |
|
VISUAL
colorHash
|
180000001c0 |
|
VISUAL
cropResistant
|
26e64839d4c42900,a200000000200023,b0f0e0c4c8d0ccb2 |
Fake Netflix site positioned to capture victims through SEO tactics, typosquatting, or paid advertising. Serves as entry point for multi-stage attacks including credential theft and malware distribution.
JavaScript intercepts form submissions before they reach the fake backend. This allows real-time credential harvesting and validation without server round-trips.
Pages with identical visual appearance (based on perceptual hash)
Found 3 other scans for this domain