Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T16455F861F1A22833202F52D5E47D67096193F76ADB420BC1E7F443B81BEBC69781B99C |
|
CONTENT
ssdeep
|
12288:ZZfdU4uIOXV25TZ0Qnn3OwVFG6mM1lvgrND/eQOaekQ68bfXoOFiH5:IXM0QkQ68bfXoGK5 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
bb05431f1e53435e |
|
VISUAL
aHash
|
00e7efcf9ffffdff |
|
VISUAL
dHash
|
d80e59392949194d |
|
VISUAL
wHash
|
00c3c58d85efede1 |
|
VISUAL
colorHash
|
07006048000 |
|
VISUAL
cropResistant
|
8080c2d2d2828080,9e0e19392d99190d,c0c8e8c8c00aa22a |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Malicious code is obfuscated using 2770 techniques to evade detection by security scanners and make reverse engineering more difficult.
Found 8 other scans for this domain