Phishing Analysis
Detailed analysis of captured phishing page
Captura Visual
Informações de Detecção
Hashes de Conteúdo (Similaridade HTML)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1673101BDA15159EF12039EF2B2917E1DB0C5D70BCEB75C08B1AE02A773F2E415C52164 |
|
CONTENT
ssdeep
|
48:T31ZdUvjP3/uJdPeNU082aaCA2ZvNNdEVvB:TfdU7iwU05yZGRB |
Hashes Visuais (Similaridade de Captura)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b139cec633189cc7 |
|
VISUAL
aHash
|
ffcfcfc7c7cfffff |
|
VISUAL
dHash
|
6498969e9e9c1860 |
|
VISUAL
wHash
|
cfc7c3c7c0c0c0f0 |
|
VISUAL
colorHash
|
07242000000 |
|
VISUAL
cropResistant
|
6498969e9e9c1860,ddcdd25b59b6e7c2 |
Análise de Código
🔒 Obfuscation Detected
- atob
- fromCharCode
- base64_strings
📡 API Calls Detected
- firebaseLocalStorageDb
☁️ Cloud Backend
- Firebase: instagram-clone-965cc.firebaseapp.com
📊 Detalhamento da Pontuação de Risco
Contributing Factors
🔬 Análise Integral de Ameaças
⚠️ Indicators of Compromise
- Kit types: Credential Harvester, OTP Stealer, Banking, Personal Info
- 44 obfuscation techniques
🏢 Análise de Falsificação de Marca
⚔️ Metodologia de Ataque
Primary Method: Credential Harvesting
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Secondary Method: JavaScript Obfuscation
Malicious code is obfuscated using 44 techniques to evade detection by security scanners and make reverse engineering more difficult.
Drainer supports multiple blockchain networks and checks for high-value tokens on each chain before executing drain operations.
🌐 Indicadores de Compromisso de Infraestrutura
Domain Information
Hosting Information
🤖 AI-Extracted Threat Intelligence
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Scan History for instagram-chi.vercel.app
Found 1 other scan for this domain
