Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1A534D739B1917537062FA1CAA8D01B6D21F3EA3DCDA71848F6FC43BC67C6D99B182548 |
|
CONTENT
ssdeep
|
3072:SlE0Ue7zWaQpmIcgCWDsUY+PAwYRQYMiYlZEK9ERGx42QzQ7Qg3yhQ/XVICMQtJh:SOeTuprwnDs |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
e94e9292966b694e |
|
VISUAL
aHash
|
fff1d1d1dfcfc7cf |
|
VISUAL
dHash
|
0f032333171f1f1f |
|
VISUAL
wHash
|
c3c1c1c1c3c3c7cf |
|
VISUAL
colorHash
|
07402000040 |
|
VISUAL
cropResistant
|
0f032333171f1f1f,b391f1d9f2c6e273,d4517331115b91b0 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Malicious code is obfuscated using 537 techniques to evade detection by security scanners and make reverse engineering more difficult.
Found 1 other scan for this domain