Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T15BA18974A0827E3B419BC6C15B25D76B72C865D4EF476B000BF663C8CBDFCA5E921A42 |
|
CONTENT
ssdeep
|
48:Tt6q6TuuJJolFjDpYGo/5b3435aWB5lm5kkk5X0a5nmV25xKg5QvMm:TtmJJoDjDpZeQp7aCEY18WQ |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9e194e46991edc4e |
|
VISUAL
aHash
|
08030f0f5ff630ff |
|
VISUAL
dHash
|
72dbdd5a9a646555 |
|
VISUAL
wHash
|
08030f0f0ff6b0ff |
|
VISUAL
colorHash
|
06006000000 |
|
VISUAL
cropResistant
|
82c282e26aa20282,dbdf19da9e646555,72dbdbfd195a5ada,49f6766663693926,4c9736666d595932,78d8f0a6a62c3c3d,616d6c5e5e1e7e7e,1b0d050d0d0d951d |
Fake Amazon page designed to appear in search results and trick users into visiting. May redirect to credential harvesting pages, malware downloads, or serve as a trust-building step before requesting sensitive information.
Malicious code is obfuscated using 1 techniques to evade detection by security scanners and make reverse engineering more difficult.