Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T12835F7FA472CA6BC34874E8CEF26B979531FE0B9B562529099BECB7410C39E4F513850 |
|
CONTENT
ssdeep
|
24576:Sh0TmFh0TmC9YdwiQeAiQeMZR84ikDo+kR3aBluSUJ+Q9x:SKsK79YdwiLAiLMZR84ikDo+kkBluL+c |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
f1b2cec81ac69a9a |
|
VISUAL
aHash
|
fde7e724085a7a1c |
|
VISUAL
dHash
|
594c4c4c9a92d679 |
|
VISUAL
wHash
|
ede7e700425a7a1c |
|
VISUAL
colorHash
|
07201000180 |
|
VISUAL
cropResistant
|
594c4c4c9a92d679 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Malicious code is obfuscated using 813 techniques to evade detection by security scanners and make reverse engineering more difficult.
Pages with identical visual appearance (based on perceptual hash)
Found 3 other scans for this domain