Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T189D1657B03648BD796C0679C2F65775D37B0DAC4B172429087D31CAAAC4ADB3F078961 |
|
CONTENT
ssdeep
|
96:O5e4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDmttKhcbqoOtmCtc7aCmVQHSRi:ejoSBjlevudl9npcbqQb |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9e49f326e4999964 |
|
VISUAL
aHash
|
1910181c131f1fbf |
|
VISUAL
dHash
|
7161717165717d39 |
|
VISUAL
wHash
|
3908181c171f1fff |
• Ameaça: Kit de phishing para roubo de credenciais
• Alvo: Usuários da Microsoft
• Método: Formulário falso que rouba email e senha
• Exfil: Provavelmente para um servidor malicioso
• Indicators: Hospedagem gratuita, personificação da marca, incompatibilidade de domínio
• Risk: ALTO - Potencial roubo de credenciais
Pages with identical visual appearance (based on perceptual hash)
Found 2 other scans for this domain