Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T155410E6150065EB3FB1392C19796AF2BB2CACE42CA730900CBF986BD1EEFD81C61D441 |
|
CONTENT
ssdeep
|
48:TjWKCJFL8waS82ntWY8dHxGRW8hvfSSN/a:TSz8lS8MtWY8qRWovfhNi |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
cc663399666699cc |
|
VISUAL
aHash
|
0018181018181800 |
|
VISUAL
dHash
|
28303030b0b23000 |
|
VISUAL
wHash
|
ffff3c3c18181818 |
|
VISUAL
colorHash
|
38006000200 |
|
VISUAL
cropResistant
|
a280908c8c8ca2aa,28303030b0b23000 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Uses typical phishing tactics including brand impersonation, urgency tactics, and social engineering to trick victims into providing sensitive information.
Pages with identical visual appearance (based on perceptual hash)