Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T14A71423080158C335AD7C2E8AAE1D71B65928398CB431F045AF853AF7BDFD5087912D9 |
|
CONTENT
ssdeep
|
48:Y1YQbplJ5gicIBJw3xzPPEChl3jnMifA2qNTwSCSt6pFFkM+byzPS3STQkz8DBm:YfdRgiZwtPPDlnfM5wSCRNb+6PxVzf |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
89c933764336764b |
|
VISUAL
aHash
|
0039393939002839 |
|
VISUAL
dHash
|
c9f1f1f1f138c9d9 |
|
VISUAL
wHash
|
007d7d3d3904397d |
|
VISUAL
colorHash
|
16610000040 |
|
VISUAL
cropResistant
|
c8a28e96b2f223a2,c9f1f1f1f138c9d9 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Malicious code is obfuscated using 12 techniques to evade detection by security scanners and make reverse engineering more difficult.
| ID | Português | Inglês | Trigger |
|---|---|---|---|
Found 10 other scans for this domain