Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T124412FA36A558E2F1B3082959EF7F70C85A1CACD868C1A11DAFC12C80AC5FB0E4735E1 |
|
CONTENT
ssdeep
|
48:TyrdFkh4uW7octcqEhjWW3j35+sOOKSCt:TQuWo35+pOu |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
dcdc73318c8e8933 |
|
VISUAL
aHash
|
c280181818180000 |
|
VISUAL
dHash
|
160c32b232320c30 |
|
VISUAL
wHash
|
efe3fc3c3c180018 |
|
VISUAL
colorHash
|
380020001c0 |
|
VISUAL
cropResistant
|
160c32b232320c30 |
Fake CoinMarketCap site positioned to capture victims through SEO tactics, typosquatting, or paid advertising. Serves as entry point for multi-stage attacks including credential theft and malware distribution.
Malicious code is obfuscated using 1 techniques to evade detection by security scanners and make reverse engineering more difficult.
Pages with identical visual appearance (based on perceptual hash)