Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T11DC30B71E0E2A53B608B81D196746BBE606EC206CB430FF553F9E3B95B80DD7AC93185 |
|
CONTENT
ssdeep
|
1536:BhOtLE94EE5Az1XyCva2EB6B5BoBRBrB0BrgBp0ghhhRx2PkmUBVctxp:t9Usa2kq7IDVUMBpVx2PSCtxp |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
d2c4179b3cd0e2c7 |
|
VISUAL
aHash
|
3c3c7058181c3c04 |
|
VISUAL
dHash
|
f0e1e5b2b0f878e8 |
|
VISUAL
wHash
|
7e7c7c78383c3c04 |
|
VISUAL
colorHash
|
30000200209 |
|
VISUAL
cropResistant
|
f0e1e5b2b0f878e8 |
Victim is prompted for 2FA code after entering credentials. The code is intercepted and used by attacker to access victim's account in real-time.
Victim enters credit/debit card details including CVV and expiration. Card data is captured and can be used for fraudulent transactions or sold on dark web markets.