Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T196527B71C08025AF6932EDB3FB78F7AAD1D7A76D8D31841086688F5ED5A9FD08316483 |
|
CONTENT
ssdeep
|
192:I8Uut0MRJ4jSL7chyte4JirHTVOMwYdUKmmMJh7tb2ZStIvqKxf+LVdCrGRVt2z7:hkKfVu+qNGlbvAAlWck |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b3996666c9669919 |
|
VISUAL
aHash
|
e7e7efefefe7e7ff |
|
VISUAL
dHash
|
08081018101c4d00 |
|
VISUAL
wHash
|
66c70707c4c4c0fc |
|
VISUAL
colorHash
|
07000030000 |
|
VISUAL
cropResistant
|
08081018101c4d00 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Malicious code is obfuscated using 129 techniques to evade detection by security scanners and make reverse engineering more difficult.
Pages with identical visual appearance (based on perceptual hash)