Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1A8934BB1E5018C3D1F2F8AF5E41A66BED2429C0F79B15CB0F5ADA3637283F644A17026 |
|
CONTENT
ssdeep
|
1536:LsnFw9QXF/qh7KhaBCHwtL7ZfT0ZNqchnFoYyaqq6lySAZHEit2lXMVDgzGryqyt:LHlaqq6MSXajispDn3OtE+GnIWnIjiDQ |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b847c7383bccc0c7 |
|
VISUAL
aHash
|
ffcfdf8d8f8fffff |
|
VISUAL
dHash
|
881b31391919260e |
|
VISUAL
wHash
|
7f898888888dc3ff |
|
VISUAL
colorHash
|
07601008000 |
|
VISUAL
cropResistant
|
881b31391919260e,430b0b891963333e,260e1e1e2d0d9d39,6d67e7eb67635b7b |
• Ameaça: Phishing de credenciais
• Alvo: Usuários do Instagram
• Método: Suplantação de domínio e coleta de formulários
• Exfil: wss://edge-chat.instagram.com/chat
• Indicadores: Domínio não relacionado, formulário presente, envio de formulário javascript, detecção de ofuscação.
• Risco: ALTO
The attacker is using a fake login page that closely resembles the official Instagram login to trick users into entering their credentials. These credentials are then captured by the attacker.
The attacker registers a domain unrelated to Instagram and uses it to host the phishing page, aiming to deceive users.
Pages with identical visual appearance (based on perceptual hash)
Found 10 other scans for this domain