Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T112B14BF07152643B16A3CAD5A6F95B5FB3D0864DCB878A0242F8C3AF4BCBD45CD2A110 |
|
CONTENT
ssdeep
|
48:91pIen/4qN9zMl99tnyBsidpUUuwm17V70kT4xbdOt8Ql1z9iEdi/dk65U2lhQBn:L//Qwi1JOOBjia62DT4Lj6SxUCYn |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
8118d6f6276dcc2d |
|
VISUAL
aHash
|
0c0c000000ffffff |
|
VISUAL
dHash
|
fdddd3dbda0c0f0e |
|
VISUAL
wHash
|
1d0c080002ffffff |
|
VISUAL
colorHash
|
07601008000 |
|
VISUAL
cropResistant
|
26dddddd91d2d3d3,1838d8c0e0f0f0f0,db9a1a040c1e0e00,e9e9ede9e9ededed,ddddd192d3dbdf9a |
• Ameaça: Kit de phishing para roubo de credenciais de Apple ID
• Alvo: Usuários da Apple
• Método: Página de login falsa da Apple ID roubando e-mail e senha
• Exfil: Destino de dados desconhecido, provavelmente uma API personalizada ou e-mail
• Indicadores: Incompatibilidade de domínio, formulários detectados, envio de formulários javascript
• Risco: ALTO - Roubo imediato de credenciais
Pages with identical visual appearance (based on perceptual hash)
Found 1 other scan for this domain