Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T161A25570A188FA3341A7C2E7A63583AF76D0C785CB5B0B5143F9C32D5BD6EA5CD1128A |
|
CONTENT
ssdeep
|
384:NPIIrl3RAglrj0JZQHZwGzQP5MRG4U+jTLYUKsI8R7mfMwAXYrGVzpdam9KC65U/:pII5X5j2Ko9fMwAXhwiFOf6 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9e9b312c2c939bcc |
|
VISUAL
aHash
|
01003cbc10180000 |
|
VISUAL
dHash
|
1b22697927717804 |
|
VISUAL
wHash
|
8f00fcff993d3c00 |
|
VISUAL
colorHash
|
38000038400 |
|
VISUAL
cropResistant
|
545f99e4a43b3b63,1b22697927717804 |
• Ameaça: Phishing/Crypto-Drainer
• Alvo: Usuários de criptomoedas
• Método: Impersonação de carteira criptográfica
• Exfil: Interação maliciosa via JS ou malware
• Indicadores: Domínio recente, código ofuscado
• Risco: Alto
The site prompts users to download an app or sign transactions that likely contain malicious drainer code designed to empty cryptocurrency wallets.
Use of professional landing pages to establish fake trust to solicit sensitive security keys.