Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T10CD38772E755B42B213B80D4E671EF2B634412C6C7A28AD5FBF408E7E6CDC54A42709E |
|
CONTENT
ssdeep
|
3072:yyr6/HQZlS3QZbGPQZ48wQZDDL/NAwr/Ne77/N6DM/NLN4danKEdaYSkdaymrdap:O528 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9212eeef0595ba38 |
|
VISUAL
aHash
|
0000003c00ffffff |
|
VISUAL
dHash
|
f8cc9cdcd42bc8d4 |
|
VISUAL
wHash
|
0000007e24ffffff |
|
VISUAL
colorHash
|
07001008180 |
|
VISUAL
cropResistant
|
8c80a0b8e6fcee73,2ae82c92db9392b6,806062d4e8c4d0d4,78cdc89c9cd8d4d4 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Victim is prompted for 2FA code after entering credentials. The code is intercepted and used by attacker to access victim's account in real-time.
Pages with identical visual appearance (based on perceptual hash)
Found 1 other scan for this domain