Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T115B10F757082DA3B21DB93E2AB311B1F36C6C345C953071865F98B9E4FC2E48CC166E6 |
|
CONTENT
ssdeep
|
96:TSNu2mpr3CZmzZRZCZRZQZCZbZ1ZGKmZ2xDuKRR8Iv92xHszNPy:GxmV3ao/a/Ma9Thu2sKcg92lszN6 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c43c37c14933a9b7 |
|
VISUAL
aHash
|
0050d73c787a6420 |
|
VISUAL
dHash
|
12a4a4a0e2da4847 |
|
VISUAL
wHash
|
02f0d73e7a7be420 |
|
VISUAL
colorHash
|
31c00000001 |
|
VISUAL
cropResistant
|
12a4a4a0e2da4847 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Uses typical phishing tactics including brand impersonation, urgency tactics, and social engineering to trick victims into providing sensitive information.