Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1DBD1E07050509D3B5283C7D4B3B96B9F3794C346EA97565A63F8C39C0EE3E26CC1A226 |
|
CONTENT
ssdeep
|
96:nIpkCGTHRPy3krwkMAs39TbJG9KjsWsjORaX0U2gs0sjORaiOVJQ6Q6ynQjNsjOE:9kk859TbJG9a8FQiOVJQyyQj8D |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9c4b7326cc99d964 |
|
VISUAL
aHash
|
18001818191f0f9f |
|
VISUAL
dHash
|
7161713331727d38 |
|
VISUAL
wHash
|
191818181f1f1fff |
• Threat: Credential harvesting phishing
• Target: BELECTRIC users
• Method: Fake login page attempting to steal credentials
• Exfil: Unknown - likely to a server controlled by the attacker
• Indicators: Domain does not match the official brand, login form present
• Risk: HIGH - Risk of stolen credentials being used for malicious purposes
Pages with identical visual appearance (based on perceptual hash)
Found 10 other scans for this domain