Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1D803063A9134648F4D651A4B6F10B799825E40AD93332AE721CFC93D1AD0688BCF3E5D |
|
CONTENT
ssdeep
|
768:OsMyiKdB2Hfgnl5DZ8XK4TeiwY12HzktQTn9QSyoV:OsMyi+2Hf9XAil2Hzz9NyoV |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b81e7f1c081cbd9c |
|
VISUAL
aHash
|
0000ffdfdfdfffdf |
|
VISUAL
dHash
|
340f3ab3b3333333 |
|
VISUAL
wHash
|
0087874f0f8f8f8f |
|
VISUAL
colorHash
|
070000001c0 |
|
VISUAL
cropResistant
|
0060343434340030,2f3bb3b333333333,0018c0c4c4000000 |
Victim is prompted for 2FA code after entering credentials. The code is intercepted and used by attacker to access victim's account in real-time.
Uses typical phishing tactics including brand impersonation, urgency tactics, and social engineering to trick victims into providing sensitive information.
Pages with identical visual appearance (based on perceptual hash)