Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T11F131233C0132132524B52E5F8A0775A2293C32EDE4708891B7CDB917BFBDAA798795D |
|
CONTENT
ssdeep
|
768:v0X5SR0K/CNp2L13/lRJ6a+co6v+c6o4IE/Irb5dEoGEqOzVWsPk6TRC1mX6nwC/:KSR0KaN8L13/XJ6fco6Gc6o4L/Irb5d0 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b7154d1715159d55 |
|
VISUAL
aHash
|
26e7efe7e7e7e7ff |
|
VISUAL
dHash
|
cc0d484c4c4c4c00 |
|
VISUAL
wHash
|
00c7c3c3c3c3c3df |
|
VISUAL
colorHash
|
07000030000 |
|
VISUAL
cropResistant
|
cc0d484c4c4c4c00 |
• Amenaza: Kit de phishing para robo de credenciales
• Objetivo: Usuarios de Amazon internacionalmente
• Método: Formulario falso de verificación que roba información de la cuenta
• Exfil: Desconocido, probablemente recopilado a través de la presentación del formulario
• Indicadores: Hosting gratuito, discrepancia de dominio, lenguaje de phishing
• Riesgo: ALTO - Robo inmediato de credenciales
Pages with identical visual appearance (based on perceptual hash)
Found 10 other scans for this domain