Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1066131306068206653470FE9B5B97B0E31ABC35DCA4324693AAC93E51BFBDE4DC1D254 |
|
CONTENT
ssdeep
|
96:nqZeEMRL5Jke4Nbt6lS4I0sc+3g5w7U95sSQ:KeEYINYlSuuwGU95c |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9992e7cd4c661837 |
|
VISUAL
aHash
|
ffff3e1818180000 |
|
VISUAL
dHash
|
f0f8f8b2b2b2ccb2 |
|
VISUAL
wHash
|
ffffff1c18180800 |
|
VISUAL
colorHash
|
1bc00008000 |
|
VISUAL
cropResistant
|
e0e0f0f0f0f0f070,b2e0f033339080aa,f0f8f8b2b2b2ccb2 |
• Ameaça: Ataque de phishing para roubo de credenciais
• Alvo: Usuários da Microsoft
• Método: Página de login falsa da Microsoft roubando email e senha
• Exfil: Exfiltração de dados via envio de formulário JavaScript para /landingpages/383f1f74-582e-4e0d-84e4-ac21f2aca1d5/jbwmxnvyjjz9e3ur7cherdy7tw82f1wdapwqyrhxi_y
• Indicadores: Domínio incompatível, formulários detectados, envio de formulário JavaScript
• Risco: ALTO - Roubo imediato de credenciais
Pages with identical visual appearance (based on perceptual hash)
Found 10 other scans for this domain