Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1EF12833E6100693B4183C2E2B772AB1A3BC382D9D7430B54B5F8D398AFD6D4ACD36641 |
|
CONTENT
ssdeep
|
192:x1t6R7KnQ9mHrj8pjRjS7rjQj7j2IjNSixQ/69Q888oF:D/X8lNuK7j5NrxQX |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
dca93304ce733ad8 |
|
VISUAL
aHash
|
0342ddf8b89a4600 |
|
VISUAL
dHash
|
06929133b0348ca4 |
|
VISUAL
wHash
|
034bcff9fc96c600 |
|
VISUAL
colorHash
|
39402008000 |
|
VISUAL
cropResistant
|
680082626a620082,06929133b0348ca4 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Uses typical phishing tactics including brand impersonation, urgency tactics, and social engineering to trick victims into providing sensitive information.
Pages with identical visual appearance (based on perceptual hash)