Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T15F02B1B090C5363F429702D58BA0AF5AB3E74141D92A060AD6F1928FDADBFC1DC4EE5D |
|
CONTENT
ssdeep
|
96:n6p1BhTh7Wiuv/GoHFYXiGoHFYXnGoHFYXAGoHFYmDyQGoHFY10SS6y3J4vaJXkc:6pPtu1ldlyl5lVlG0SbEjrDV |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
93916e6c99f1ca92 |
|
VISUAL
aHash
|
f904ee6e0e00003c |
|
VISUAL
dHash
|
637c98d858200269 |
|
VISUAL
wHash
|
ff0efeee0e00003d |
|
VISUAL
colorHash
|
304010000c0 |
|
VISUAL
cropResistant
|
0000000000000204,64d484a082828180,637c98d858200269 |
• Threat: Credential harvesting/phishing attack impersonating Ledger.
• Target: Ledger users, particularly those using Ledger Live.
• Method: Displaying a fake Ledger website on free hosting to potentially trick users into entering sensitive information.
• Exfil: Unknown, but likely to a malicious server.
• Indicators: Free hosting on Vercel, domain name not matching Ledger's official domain.
• Risk: HIGH - Could lead to theft of cryptocurrency or other sensitive information.
Pages with identical visual appearance (based on perceptual hash)
Found 5 other scans for this domain