Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1B462A9B15224AE7712E3E5E4A5F9AB5B32C1C359DB47430182FC83ED1BDBC80ED5A096 |
|
CONTENT
ssdeep
|
192:JZkY5gIm2k0lhdPi3mziSNg/qZ5ic1Abl1DQaeClwH0DMpPf5dCi4Ns82YEwie:JGY5gIVhEWzycxZf5Ui4WtTwie |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9833999966ccce66 |
|
VISUAL
aHash
|
1818181818181818 |
|
VISUAL
dHash
|
b2b2b0b0b2b2b2b2 |
|
VISUAL
wHash
|
1b1b1b1b18183c18 |
|
VISUAL
colorHash
|
31440000240 |
|
VISUAL
cropResistant
|
6a7b3a3c3c3e7efe,3e3c98501e888182,9236ec9e69e86303,b2b2b0b0b2b2b2b2 |
Generic phishing page with unclear attack methodology. May use social engineering, brand impersonation, or other tactics to deceive victims.
Malicious code is obfuscated using 1 techniques to evade detection by security scanners and make reverse engineering more difficult.