Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T121E43AF6832C61BC34470E8DFF227969531FF1B9B9625294E9BECBB410C39A4EA17450 |
|
CONTENT
ssdeep
|
12288:SUG03agm0W0oQ9YdwiQeAiQeMZR84ikDo+kRjGoyBluSUJHeQ9GI:Sh0Tms9YdwiQeAiQeMZR84ikDo+kRjgO |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
f1b2cec81ac69a9a |
|
VISUAL
aHash
|
fde7e724085a7a1c |
|
VISUAL
dHash
|
594c4c4c9a92d679 |
|
VISUAL
wHash
|
ede7e700425a7a1c |
|
VISUAL
colorHash
|
07201000180 |
|
VISUAL
cropResistant
|
594c4c4c9a92d679 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Malicious code is obfuscated using 278 techniques to evade detection by security scanners and make reverse engineering more difficult.
Pages with identical visual appearance (based on perceptual hash)
Found 3 other scans for this domain