Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T159D1A631821C163B468BCA80E4F3AB9A75D6C34FC3176DD4BFEC26276BC9DB14A84014 |
|
CONTENT
ssdeep
|
96:UMdtFMdj0HqtoI6BAZ6CIbOL/gABdJCEzc6qp7Ecc6qmWUhmpb79p/XKOr:UMJY0rBAyOL4srCEQdExNUhSPzxr |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
ecab949b90946ad3 |
|
VISUAL
aHash
|
fff1f0f0f8f0f2f0 |
|
VISUAL
dHash
|
2c03632723230424 |
|
VISUAL
wHash
|
fff1b09090f0f0f0 |
|
VISUAL
colorHash
|
06402000040 |
|
VISUAL
cropResistant
|
2c03632723230424,0b636353152721bd,9b0d8dcd5d64487e,715950e101cdec76,073b6f5d1f0f1e6e,011f20605919691d |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Malicious code is obfuscated using 35 techniques to evade detection by security scanners and make reverse engineering more difficult.
| ID | Português | Inglês | Trigger |
|---|---|---|---|
Pages with identical visual appearance (based on perceptual hash)