Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T179724C5A9E2C5C1D830926A7E3DE09CC613DD397DB5901C494FAE8C888D7A64DCCAC9D |
|
CONTENT
ssdeep
|
192:SLwJ7tvTKuuvhAZ44vW398QNJdJdrUWi5cPQ1+LKNon/KNwJORY1xVVCsQufEUo9:Sc/TKusK49SQnp7i5cNLKeARYvWc0 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
e0e00f0fea8f0fe8 |
|
VISUAL
aHash
|
01c0f8f0e0000000 |
|
VISUAL
dHash
|
6b90929096788000 |
|
VISUAL
wHash
|
f1f0f8fef0400000 |
|
VISUAL
colorHash
|
00000000e00 |
|
VISUAL
cropResistant
|
4d14672f16680c8e,6b90929096788000 |
• Threat: No apparent threat detected
• Target: WeTransfer users
• Method: Legitimate file download interface
• Exfil: No data exfiltration detected
• Indicators: Legitimate branding, standard file transfer interface
• Risk: LOW - Standard operation, no immediate risk
Pages with identical visual appearance (based on perceptual hash)
Found 10 other scans for this domain