Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1D7C150BA1111E97F09E391E17635AF1A73D2D284DA43072959F8D3BC0FCAE09ED265C1 |
|
CONTENT
ssdeep
|
96:xsoBBwZD02Kx/5bLJ0otk1Mj2UGNio2Na38az1uUG7eLW:xZBwdlK55beWj2USiTNa38az1uUwF |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c4bd77db88e4211a |
|
VISUAL
aHash
|
000063ffff790000 |
|
VISUAL
dHash
|
065286a5f1c3c6c4 |
|
VISUAL
wHash
|
820077fffff96000 |
|
VISUAL
colorHash
|
3ac02000000 |
|
VISUAL
cropResistant
|
065286a5f1c3c6c4 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Uses typical phishing tactics including brand impersonation, urgency tactics, and social engineering to trick victims into providing sensitive information.