Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1A503FA3285A8723352238DC87362175E35E3870ECD776F0AA7BC87888FD6E95CE56146 |
|
CONTENT
ssdeep
|
768:/jf3XvvaCwfY3Hcl0GSX2S6mH2hptvv7SG4wyThz9PB0PY0:j3XvNwfYXclj7ptvzSG4RThztB0PY0 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c33c6d82923d6de1 |
|
VISUAL
aHash
|
0070600c6c646060 |
|
VISUAL
dHash
|
26c0c0c9cdccc2d0 |
|
VISUAL
wHash
|
a270607c7c7c787c |
|
VISUAL
colorHash
|
38000200030 |
|
VISUAL
cropResistant
|
26c0c0c9cdccc2d0 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Malicious code is obfuscated using 69561 techniques to evade detection by security scanners and make reverse engineering more difficult.
Drainer supports multiple blockchain networks and checks for high-value tokens on each chain before executing drain operations.
Found 2 other scans for this domain