Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1A9E131B19095B57B6186C2C00BB15B5FB3D3A768CE634B8AC7F5D39D6B97C91CC02109 |
|
CONTENT
ssdeep
|
96:P7qBwu5KrNUmmx/RS8z4N6nF1kXhR54Ba0325LzSxPFDJ:jJuQ5UmmxgbY1Y7WMrCPFDJ |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b0cd3232cfd33493 |
|
VISUAL
aHash
|
ffffffffc7878787 |
|
VISUAL
dHash
|
8ab2bab32f0e0d2d |
|
VISUAL
wHash
|
c1c3dbdb83838387 |
|
VISUAL
colorHash
|
06000000e00 |
|
VISUAL
cropResistant
|
8ab2bab32f0e0d2d,f0323323232323d8,4949c9e9f878e8f8 |
Victim is prompted for 2FA code after entering credentials. The code is intercepted and used by attacker to access victim's account in real-time.
Uses typical phishing tactics including brand impersonation, urgency tactics, and social engineering to trick victims into providing sensitive information.
Pages with identical visual appearance (based on perceptual hash)