Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1956140302461216A035B0EEAB4FA7B0E71ABC31DCA431454769D93E16FF7EE4FC192A4 |
|
CONTENT
ssdeep
|
96:nqZeEMBV5Jke4Nbt6lS4I0sc+3Cbw/gnJmSQ:KeEVNYlSuuag |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9992e7cd4c661837 |
|
VISUAL
aHash
|
ffff3e1818180000 |
|
VISUAL
dHash
|
f0f8f8b2b2b2ccb2 |
|
VISUAL
wHash
|
ffffff1c18180800 |
|
VISUAL
colorHash
|
1bc00008000 |
|
VISUAL
cropResistant
|
e0e0f0f0f0f0f070,b2e0f033339080aa,f0f8f8b2b2b2ccb2 |
• Ameaça: Phishing para roubo de credenciais
• Alvo: Usuários da Microsoft
• Método: Página de login falsa da Microsoft para roubar credenciais
• Exfil: Dados enviados para /landingpages/383f1f74-582e-4e0d-84e4-ac21f2aca1d5/hqkq7rmkn4dswtoierz11pn8wbucoxpj7rno3gc-nne
• Indicadores: Incompatibilidade de domínio, envio de formulário JavaScript, ações de formulário
• Risco: ALTO - Roubo imediato de credenciais
Pages with identical visual appearance (based on perceptual hash)
Found 10 other scans for this domain