Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1C79126774391C7D690A589ECBE92E25A231859C2F1B453D07B6E0872DF8C0F2697C74D |
|
CONTENT
ssdeep
|
96:7MINqi23t9M6bkWAZVuCrCPwgTwyjAN72FYvvXPEm+Tca1xuBMNIT:ottyDruCrCPTk2qvvXPEm+Tca1xuN |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b3b24e4eb31b8a32 |
|
VISUAL
aHash
|
ffffffffff000000 |
|
VISUAL
dHash
|
081c1c1c08101000 |
|
VISUAL
wHash
|
00ffe7efff000000 |
|
VISUAL
colorHash
|
07000038000 |
|
VISUAL
cropResistant
|
081c1c1c08101000 |
• Threat: Informational page indicating a domain is reserved
• Target: Users visiting newly registered domains
• Method: Displaying a message that no content has been uploaded yet
• Exfil: No data exfiltration
• Indicators: Strato branding, multilingual text
• Risk: LOW - Informational page, no malicious activity
Pages with identical visual appearance (based on perceptual hash)