Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1E313D6BA035143CE55DBCBE8BF782D4421A4E0CFF59981D0A7566991DAEBCE4F40C7A0 |
|
CONTENT
ssdeep
|
768:9KUa39XQRNexeZLPC7nkh75sg5pQkm+JmKYvFbG3Sz5Wze1tzOYF0yY94:9g9XQRTFCYH5p3OkCzA4tqG0yYa |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
88eb22e968eaf2aa |
|
VISUAL
aHash
|
81007e18187e1c00 |
|
VISUAL
dHash
|
0312cc70b0d4d5a1 |
|
VISUAL
wHash
|
81007e3c187e7fd9 |
|
VISUAL
colorHash
|
3800a000080 |
|
VISUAL
cropResistant
|
ffbfee653333feff,0312cc70b0d4d5a1 |
• Ameaça: Phishing/Golpe de cripto
• Alvo: Usuários de trading/cripto
• Método: Template genérico de plataforma de trading
• Exfil: Envio de formulário via JS
• Indicadores: Domínio extremamente novo, código ofuscado
• Risco: Alto
Site attempts to lure users into creating an account on a fake exchange to collect email/password and potentially deposit funds.
Promotes fake 'rapid' withdrawal/deposit services to encourage user trust.