MODELING PHISHING SCENARIOS IN UKRAINIAN CYBERSPACE: AN ANALYTICAL APPROACH USING GRAFANA-BOARD

The article presents an innovative methodology for modeling phishing scenarios in Ukrainian cyberspace based on data integration in the Grafana environment. The main attention is paid to the detection, classification and typification of phishing domains and malicious content delivery channels (social networks, SMS, messengers, mobile applications). The use of data from HTTP proxy logs, DNS API and NetFlow traffic is proposed to build interactive dashboards that visualize time patterns, top domains, delivery channels and campaigns. Special attention is paid to the economic assessment of damage: financial losses of users are calculated taking into account the number of transitions, average losses per incident and attack topics. The paper also considers the use of machine learning algorithms (decision trees, XGBoost) for automated detection of phishing URLs based on behavioral, content and technical features. A concept for integrating visualization results into SIEM systems (Splunk, QRadar) for rapid response to threats is proposed. The research results are of practical importance for the formation of national cyber defense platforms, the development of state registries of phishing do