Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T12A12A47E6104693B4187E2E6B7729B2A3BC28199C7831B0475F9D3989FD6C48CF36642 |
|
CONTENT
ssdeep
|
192:rwSuVmPdp8l3Kyjc9mNWKjhJj0j37zjJjUj2Aj6SiJSp9l83H8/B:eYPglXjHWEhFOzFUjp6rJyJ |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
cca93304ce737ad8 |
|
VISUAL
aHash
|
0342ddf8b89a4600 |
|
VISUAL
dHash
|
06929133b0348ca4 |
|
VISUAL
wHash
|
034bcff9fc96c600 |
|
VISUAL
colorHash
|
39402008000 |
|
VISUAL
cropResistant
|
680002626a620082,06929133b0348ca4 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Uses typical phishing tactics including brand impersonation, urgency tactics, and social engineering to trick victims into providing sensitive information.
Pages with identical visual appearance (based on perceptual hash)