Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T19692B737D140313A0E2302813B1D275BE37590A8A6666599D8FFC34E0B8BB8DAE775D7 |
|
CONTENT
ssdeep
|
384:bGqPDFqlawHIIWyQK6ibAYiaqyI3zRVhS3d/JstM5gPx7wZZmnBQXn:bLPDslVIIy56iaqyY36DeK |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
bc4357471343663d |
|
VISUAL
aHash
|
00ffdfffc7ffffc7 |
|
VISUAL
dHash
|
cc3637101f2f323f |
|
VISUAL
wHash
|
00c3c3ff8383df83 |
|
VISUAL
colorHash
|
070000001c0 |
|
VISUAL
cropResistant
|
c037271a3f2f333f,0044b6cccc862440 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Victim enters banking credentials including account numbers and security questions. Attacker gains full access to victim's banking services.
Found 5 other scans for this domain