Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T14963FA9A6455702A073340E394BB2F89B3795C2FF92905D1A4B8C7E572AC8F1316BF4B |
|
CONTENT
ssdeep
|
768:myWuD5Pu/tWcGsyWH/uM9XMbC1SfLvML8n+/TNw16ZsX8UOT4j8upxhBX6SZcLbS:uIrXujVl1yOloQzZs8oWQbp |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b1cc31cf61c96c39 |
|
VISUAL
aHash
|
c3cfcfefc7f7cfc7 |
|
VISUAL
dHash
|
129e9a1e16069a9e |
|
VISUAL
wHash
|
c3c3c3c3c3c3c3c3 |
|
VISUAL
colorHash
|
07600000c00 |
|
VISUAL
cropResistant
|
129e9a1e16069a9e,0000047871712904,9f1b60f4def64c46 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Malicious code is obfuscated using 693 techniques to evade detection by security scanners and make reverse engineering more difficult.
Pages with identical visual appearance (based on perceptual hash)
Found 1 other scan for this domain