Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T196235AB26732B4B843DB91DEE7382D46B2C2989DF8C74514B1C99ACD13C3C816297BB4 |
|
CONTENT
ssdeep
|
768:aL+EsZx8/G8R4NDawKM5BKwlM5BpqN2/y9dGDUDF1E56ITmH+LXPnTyPqDvlAz5W:aL+EsZ/8CNDawKM5BKwlM5BkN2/y9dGV |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
be2fc56994c16594 |
|
VISUAL
aHash
|
818181818181ffff |
|
VISUAL
dHash
|
4f6171752f033300 |
|
VISUAL
wHash
|
e38189818181ffff |
|
VISUAL
colorHash
|
13007000000 |
|
VISUAL
cropResistant
|
4f6171752f033300,0a6169f0302f0b23 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Malicious code is obfuscated using 18 techniques to evade detection by security scanners and make reverse engineering more difficult.
Found 1 other scan for this domain