Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T14F647C234259792A4437C7D130A99B3AD1A6DE8BFAA70A010FDCC7F72BF9C60745A11D |
|
CONTENT
ssdeep
|
1536:FUgQmTa3MZo+Hd1+F0Cby5d+Smfu4/ZT4oU5y20FEfKIwmvSpO5CmBPR+/0Y1WB1:FOQPV5fQXFm4Yfq5g3F |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
bb46b9bd1039cc16 |
|
VISUAL
aHash
|
0000200004ffcfcf |
|
VISUAL
dHash
|
98cdecc8cc3b1b3b |
|
VISUAL
wHash
|
0064740466ffcfcf |
|
VISUAL
colorHash
|
3200000000b |
|
VISUAL
cropResistant
|
80333b3a3b3a3b3b,a8d5cde8ecc8cccc,0100000000000000 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Malicious code is obfuscated using 31 techniques to evade detection by security scanners and make reverse engineering more difficult.
Pages with identical visual appearance (based on perceptual hash)
Found 1 other scan for this domain