Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1A132BC70548A6E7F10C396E0AB74AF1AF3C68344C7231B28A3F5939E1FD6D0ACD29525 |
|
CONTENT
ssdeep
|
96:nUCBf55s5kGyLqm98TJr6NIF8Dl8DrMH8DrhBUm2TijMidDiSi7iK2ieRFTbIbLj:UCBB50/yt981C2QorkcVgK/qrP |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9959581bb2f2baa2 |
|
VISUAL
aHash
|
0000ffffffff5a00 |
|
VISUAL
dHash
|
b17035696075b2aa |
|
VISUAL
wHash
|
0000ffffffff0000 |
|
VISUAL
colorHash
|
0f003018000 |
|
VISUAL
cropResistant
|
0c097308587c7c70,8000c0c280800080,8000c0c0c2008080,39b9b0b0f0d4b032,30318aa2a29229aa |
• Ameaça: Kit de phishing para roubo de credenciais
• Alvo: Usuários de DeFi internacionalmente
• Método: Interface falsa de mineração para roubar dados de usuários
• Exfil: Dados enviados via JavaScript ofuscado
• Indicadores: Domínio recente, JS ofuscado, discrepância de marca
• Risco: ALTO - Roubo imediato de credenciais
Pages with identical visual appearance (based on perceptual hash)