Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T10A3231B08255983F0263C2CAD3AA273D70E65199EE070119E3FD037E65FEC62FD1A959 |
|
CONTENT
ssdeep
|
192:95sk6wmrpcEfz9tyecbOkbeXyJCXFIZ/kD8HPIVkwY/4pDSwLAZmo5:fsk6wmuEfz9tabdbPJCXFIKD8vIiwY/N |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9dd46633d8c83933 |
|
VISUAL
aHash
|
00163e7e1f1b0000 |
|
VISUAL
dHash
|
6cd4f2b2bab2c6b4 |
|
VISUAL
wHash
|
043e7e7f7f1f0200 |
|
VISUAL
colorHash
|
3800004000a |
|
VISUAL
cropResistant
|
d48c88c8ca4e0e8c,26c6b2b29292b2c6,96868e868e8e8e8e,6cd4f2b2bab2c6b4 |
Generic phishing page with unclear attack methodology. May use social engineering, brand impersonation, or other tactics to deceive victims.
Malicious code is obfuscated using 3 techniques to evade detection by security scanners and make reverse engineering more difficult.