Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1BD1344719059A93B02E392D067B5AF9BB3C9E3C9C95307442BF9C39D8FCAE54EC11162 |
|
CONTENT
ssdeep
|
768:Oyxyzdpof/swwPAIW4UfG0Ig4Uf4EIH4UfKtEIh4UfMgIg4UfI8Ig4UfDEIg4Ufl:9xyzdp0cz0z4dhcxbfAZaAQ8ymV |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9a65e7b199a92163 |
|
VISUAL
aHash
|
ff10001c1c1c1c3c |
|
VISUAL
dHash
|
5d6465b1b1b97979 |
|
VISUAL
wHash
|
ff14103d3c3c3c3c |
|
VISUAL
colorHash
|
0b000000e00 |
|
VISUAL
cropResistant
|
6cb2b9a5ab9a4a64,4a34619c29f414b4,8696767446e747e6,d6f64ccca4a48eca,cc8e9a8a92a8aa8a,219e912eb256d926,5d6465b1b1b97979 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Malicious code is obfuscated using 54 techniques to evade detection by security scanners and make reverse engineering more difficult.
Pages with identical visual appearance (based on perceptual hash)
Found 6 other scans for this domain