Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T19813833A12485E3D6487C3B4E7B5B37852A9C386D32B8659E2FD433A4B82C85DD336D4 |
|
CONTENT
ssdeep
|
384:Okq6PsYk09V7IrY14lDflhsqVGIrFqHG2NjaNcFK:Okq6XVaPVGqF3kaNcFK |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
d0953d3d3734e0b4 |
|
VISUAL
aHash
|
1e7c7c7e7e780000 |
|
VISUAL
dHash
|
b6c094ccec903188 |
|
VISUAL
wHash
|
1e7e7e7e7e780000 |
|
VISUAL
colorHash
|
380000001c0 |
|
VISUAL
cropResistant
|
b6c094ccec903188 |
Victim is prompted for 2FA code after entering credentials. The code is intercepted and used by attacker to access victim's account in real-time.
Victim enters credit/debit card details including CVV and expiration. Card data is captured and can be used for fraudulent transactions or sold on dark web markets.