Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T173132333C0532132524B52E9F8A077562293C32EDE4708491B7CDB913BFBEAA798795D |
|
CONTENT
ssdeep
|
768:1dRo/CNpmL13/TnJ6a+co6v+c6o4IE/Irb5dEoGEqOzVWsPk6TRC1mX6nwCTT:jRoaNsL13/jJ6fco6Gc6o4L/Irb5dEoI |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b71d0d1715159d55 |
|
VISUAL
aHash
|
26e7ffe7e7e7e7ff |
|
VISUAL
dHash
|
cc0d484c4c4c4c04 |
|
VISUAL
wHash
|
00c3c3c3c3c3c3ff |
|
VISUAL
colorHash
|
07000030000 |
|
VISUAL
cropResistant
|
cc0d484c4c4c4c04 |
• Amenaza: Kit de phishing para robo de credenciales
• Objetivo: Usuarios de Amazon
• Método: Formulario falso de verificación de cuenta que roba información del usuario
• Exfil: Datos enviados mediante envío de formulario JavaScript
• Indicadores: Hosting gratuito, JavaScript ofuscado, marca no coincidente
• Riesgo: ALTO - Robo inmediato de credenciales
Pages with identical visual appearance (based on perceptual hash)
Found 10 other scans for this domain