Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T12F63C7B271111837A1AB93E9F515B716D2D3E70FC6425BD1E2F8A3760AD9C32FA13806 |
|
CONTENT
ssdeep
|
1536:fQPX3y6+OF/Ql36jQLMjMQCXSXb4mQ9NTxJ8mzXGlty7/d+Y:4PXZpF/Ql36ULYXb4mgNVXGs |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b03033c7cfcd6c4c |
|
VISUAL
aHash
|
c7c7c3c7ffffffff |
|
VISUAL
dHash
|
8c0f8e1e361e181a |
|
VISUAL
wHash
|
028783c3c3c3cfe7 |
|
VISUAL
colorHash
|
07400010040 |
|
VISUAL
cropResistant
|
8c0f8e1e361e181a,2347cbea32b4f6b0 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Malicious code is obfuscated using 180 techniques to evade detection by security scanners and make reverse engineering more difficult.
Pages with identical visual appearance (based on perceptual hash)
Found 8 other scans for this domain