Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T14FC256799D63543E689B49CDF1F42BEEBBE2C289CD43A122D3EC43B48BD5E45D819084 |
|
CONTENT
ssdeep
|
384:/GxVs04EIytHg2NOyBsfbRfLldDWVWIAQF1VsP4zq+VvfINJfZT:+xVV4EIgHZNOyByAW9klYN1R |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
f287051ed261f596 |
|
VISUAL
aHash
|
0000fffdff800000 |
|
VISUAL
dHash
|
6c748e89091c82e0 |
|
VISUAL
wHash
|
0416fffdffc60010 |
|
VISUAL
colorHash
|
30000000180 |
|
VISUAL
cropResistant
|
8d8b4b6f7155949a,6c748e89091c82e0 |
Generic phishing page with unclear attack methodology. May use social engineering, brand impersonation, or other tactics to deceive victims.
Malicious code is obfuscated using 2 techniques to evade detection by security scanners and make reverse engineering more difficult.