Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1B7B44170E220315E9737C38F25B59F9DC273F94CC732A65DAEA4A02F26D9CA10E169D4 |
|
CONTENT
ssdeep
|
1536:pL3cf9DnxR1ZgByTg9/zTR3wTuTdHzUb4km0eQL+yefXLoBfMQitdQi+GjaubiDg:dqxFOddADN3u |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
bd4516c57171c745 |
|
VISUAL
aHash
|
a69fbbc3c1ff8f8f |
|
VISUAL
dHash
|
6c32231b032a3838 |
|
VISUAL
wHash
|
269fb18181bf8f07 |
|
VISUAL
colorHash
|
07000040083 |
|
VISUAL
cropResistant
|
6c32231b032a3838 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Malicious code is obfuscated using 624 techniques to evade detection by security scanners and make reverse engineering more difficult.
Drainer supports multiple blockchain networks and checks for high-value tokens on each chain before executing drain operations.
Found 4 other scans for this domain