Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1582242B010557E33025B83C952AAA36B31C6C28BDE4A27564AF983FA4FE3DD0FD15947 |
|
CONTENT
ssdeep
|
192:FgT1E3TQtJMw4EkoVFiktCFDecPPnbz1CFompPG:42jMJKEkoVXCsun31Cqmpe |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b3333333336631cc |
|
VISUAL
aHash
|
e7e7e7e7ffffffff |
|
VISUAL
dHash
|
4d4c4c4d14141414 |
|
VISUAL
wHash
|
c3c3c3c3c3c3c3c3 |
|
VISUAL
colorHash
|
070000001c0 |
|
VISUAL
cropResistant
|
4d4c4c4d14141414,c0232604262786a2,3146dcf0dc473045 |
Victim is prompted for 2FA code after entering credentials. The code is intercepted and used by attacker to access victim's account in real-time.
Victim enters credit/debit card details including CVV and expiration. Card data is captured and can be used for fraudulent transactions or sold on dark web markets.