Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1D563B732A24659039097D2C5F1719B1F22868789C7174FA163F857BE7ECACF5AE122CC |
|
CONTENT
ssdeep
|
1536:/wBcQOUbJo+Bjgu7IuRRbu2uYuXuouaRPozXoZBf+mkR2GRleVO+eH99hGbzSGcU:yjrfPidDeTfmkR2k8VleH99hG3SGPuBG |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
93246c324dcfc99e |
|
VISUAL
aHash
|
00007c7e0e6c3c3c |
|
VISUAL
dHash
|
ceccd8d8dcd8d8d0 |
|
VISUAL
wHash
|
00423e7e4e6e7e78 |
|
VISUAL
colorHash
|
03200038000 |
|
VISUAL
cropResistant
|
ceccd8d8dcd8d8d0,432c8c9d8c8c4d57,2bebc9f92d2d250d |
• Ameaça: Phishing
• Alvo: Usuários do Shopee
• Método: Impersonificação e isca de sorteio
• Exfil: Desconhecido, provavelmente roubo de credenciais e malware
• Indicadores: Incompatibilidade de domínio, hospedagem de blogspot, conteúdo promocional
• Risco: Alto
The attacker likely intends to steal user credentials by making users think that this is a legit website, which would allow them to gain access to their Shopee accounts and other associated information.
The attacker could also distribute malware via malicious links or downloads disguised as Shopee-related offers.
Pages with identical visual appearance (based on perceptual hash)