Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T13041421A46160301E767B3D0F8B1D7992231430AE7A60D7D6DBD96A2F2CD8B8437B5CA |
|
CONTENT
ssdeep
|
48:T0z9HlPM8J83M4p5oVf5oV5NL3yBRogOpRU4hVdZ:TM4A8qR1GbZ |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
addb9060fc0c1f93 |
|
VISUAL
aHash
|
ff7f3b9383030303 |
|
VISUAL
dHash
|
bfdb736646063616 |
|
VISUAL
wHash
|
ff7f1b9383030303 |
|
VISUAL
colorHash
|
07400018040 |
|
VISUAL
cropResistant
|
bfdb736646063616,8686accccc2650dc,6ce9c0e8d8c8c8e8,66fcf87814d1a3e2,6a78382820188d8d |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Uses typical phishing tactics including brand impersonation, urgency tactics, and social engineering to trick victims into providing sensitive information.
Pages with identical visual appearance (based on perceptual hash)
Found 3 other scans for this domain