Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T14531004440AA1E47528AD5A8FBB3572F5642C781C7470E4983F443BE2AD6EC8DEEC2D9 |
|
CONTENT
ssdeep
|
24:IAdO46W/Ppz4JYtOtsrd4PTJAeOJ+B6AUcBl9No5XIM5VfBJkm:nM46WnZEYQtW7eBBbviyMHBJd |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
96a1e5a9a9e5bc18 |
|
VISUAL
aHash
|
ff3c3c3c3c3c3c3c |
|
VISUAL
dHash
|
ce69696971696869 |
|
VISUAL
wHash
|
ff24243c3c3c3c3c |
|
VISUAL
colorHash
|
07001000180 |
|
VISUAL
cropResistant
|
ce69696971696869 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Victim is prompted for 2FA code after entering credentials. The code is intercepted and used by attacker to access victim's account in real-time.
Pages with identical visual appearance (based on perceptual hash)
Found 10 other scans for this domain