Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1A64286B36480793751E3E2E6B732333BB2C3858DC58B061516FD8B1ECAD4E52DC15996 |
|
CONTENT
ssdeep
|
192:auqjXbfxyNj44lLCEA4MJmH3LEruGKidCzf:hqjXbfAh44lHH38dCzf |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c3e71c38319cc6c7 |
|
VISUAL
aHash
|
00757c6c60183c00 |
|
VISUAL
dHash
|
95c9c9494f7171d0 |
|
VISUAL
wHash
|
00fdfdfce1003c3c |
|
VISUAL
colorHash
|
38000e00010 |
|
VISUAL
cropResistant
|
95c9c9494f7171d0 |
Victim is prompted for 2FA code after entering credentials. The code is intercepted and used by attacker to access victim's account in real-time.
JavaScript intercepts form submissions before they reach the fake backend. This allows real-time credential harvesting and validation without server round-trips.