Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1FFE29231A045BA3B61E392F5A770975EB396D206DB6B0A0027FC878C5FD3D85CC23299 |
|
CONTENT
ssdeep
|
768:L4FRjYiqdDFStCRTuX6hmAJVrg0WOX7YLN599ODZOXHAI/GkuEJdTCSiTLg7jMxa:L42hmA7rgdOrYLNxODZO3AYRLWSiWj7 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
837c3cc3e4c6d338 |
|
VISUAL
aHash
|
66000c7c6e7e0103 |
|
VISUAL
dHash
|
d477e9c9c9c8fff7 |
|
VISUAL
wHash
|
67000c7d7f7f0307 |
|
VISUAL
colorHash
|
38000000780 |
|
VISUAL
cropResistant
|
bf7fbbacec9fffff,d477e9c9c9c8fff7 |
• Ameaça: Golpe de investimento em cripto
• Alvo: Investidores de varejo
• Método: Pré-venda falsa de tokens
• Exfil: Conexão de carteira
• Indicadores: Temporizador, alta pressão
• Risco: Alto
The site prompts users to connect their Web3 wallets to 'purchase' tokens, which executes a malicious contract that drains funds.
Uses fake countdowns to force users into making hasty financial decisions.