Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T11604B6F1A040677F425F86C59BA5FEDCB3EA105EFA980856C3E8839442D3CD4EEAB544 |
|
CONTENT
ssdeep
|
1536:GaohanTLKXejn4BraXh2u56afnqK9bJK9mGehSg6aej8N6hws8r7wY6kknB6ZBFd:GaohanXnG8r7aBUBFB7ByBS |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9849673665671e9c |
|
VISUAL
aHash
|
001c3c3c1c1c3c00 |
|
VISUAL
dHash
|
1771713331396916 |
|
VISUAL
wHash
|
003c7c3c3e3e7e62 |
|
VISUAL
colorHash
|
07200000180 |
|
VISUAL
cropResistant
|
62329aa2b2aa332b,1771713331396916 |
• Threat: Cookie consent phishing
• Target: Le Monde users
• Method: Fake cookie consent popup stealing user data
• Exfil: Data sent to unknown server
• Indicators: Newly registered domain, domain mismatch, obfuscated JavaScript
• Risk: HIGH - Potential data theft
Pages with identical visual appearance (based on perceptual hash)
Found 1 other scan for this domain