Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1108275B3E242163B1AB381D7A7B71336B3E5408ED592261563FC870E8BCADC1FD52952 |
|
CONTENT
ssdeep
|
384:RykroIIX4uzk3ZIgUQqZIgUQG1OXYlB77iEa3:R1oIIXqZIgUQqZIgUQGLz303 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c35c3c952e473c39 |
|
VISUAL
aHash
|
20e060606f7f6701 |
|
VISUAL
dHash
|
5050c0c8d7dccecf |
|
VISUAL
wHash
|
38e0e0607f7f6721 |
|
VISUAL
colorHash
|
38007400000 |
|
VISUAL
cropResistant
|
5050c0c8d7dccecf |
• Ameaça: Fraude de investimento
• Alvo: Investidores de criptomoedas
• Método: Engano financeiro via plataforma falsa de trading de IA
• Exfil: Formulário via JavaScript
• Indicadores: Promessas de alto rendimento, presença corporativa inexistente
• Risco: Crítico
The site serves as a lures page to capture contact information under the guise of an AI investment platform to funnel victims into manual social engineering.
Collecting email/phone numbers for future phishing or pump-and-dump campaigns.