Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T198123331D2508E16A312C5A0F661B78A3B508357D7074A24EAF1A336B9CECF55ED53BC |
|
CONTENT
ssdeep
|
192:8ZrBNIqoocTqyZ358XYR9+5HVetOrJR8FbYa2Des5EJ+4:krryZ8XYR9EeorJREbYa2Deq4 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c35ccce82d336672 |
|
VISUAL
aHash
|
f8f8e48eab690f3f |
|
VISUAL
dHash
|
e2b08c0a5591d972 |
|
VISUAL
wHash
|
f8f8e498a149073f |
|
VISUAL
colorHash
|
07042000040 |
|
VISUAL
cropResistant
|
e2b08c0a5591d972 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Malicious code is obfuscated using 14 techniques to evade detection by security scanners and make reverse engineering more difficult.
Pages with identical visual appearance (based on perceptual hash)
Found 1 other scan for this domain