Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T13251A52A749C705B0BA2335C3E12B7BCD72345AB4A691F463454AD4FB8E2B178C051AF |
|
CONTENT
ssdeep
|
48:TjNXLcTS5DuNX1PQ4X4C0aNWxaLCw+0k7/rmnRqccArORlsQ4Asau/k7/rmnRqcG:TFiScRjcfRB |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
ec6c9393c36c6c4c |
|
VISUAL
aHash
|
002c000230c7ffff |
|
VISUAL
dHash
|
02699696660e2e00 |
|
VISUAL
wHash
|
000c000080ffffff |
|
VISUAL
colorHash
|
07001001180 |
|
VISUAL
cropResistant
|
02699696660e2e00 |
• Ameaça: Phishing
• Alvo: Usuários do Facebook
• Método: Imitação por meio de uma página de login falsa
• Exfil: Credenciais
• Indicadores: Hospedagem gratuita, logotipo do Facebook, formulário de login
• Risco: Alto
The attacker creates a fake login page that mirrors Facebook's. When a user enters their credentials, the information is sent to the attacker.
Pages with identical visual appearance (based on perceptual hash)
Found 2 other scans for this domain