Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T19D0170A08880D47F06D0C3E11BB2B3AEE742578AE6630E41C8F0A35C0E57FA0EC02388 |
|
CONTENT
ssdeep
|
12:hRwswOtIW+J5GBMhzmdqiGI/r7RN7fl42nQvBts3NEZ3a:hRfGTY5Zrr7RtfeLvUe3a |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
ce66641999999b9a |
|
VISUAL
aHash
|
00003c3c3c3c3c3c |
|
VISUAL
dHash
|
6266697171717171 |
|
VISUAL
wHash
|
18003c3c3c3cfcff |
|
VISUAL
colorHash
|
020000001c0 |
|
VISUAL
cropResistant
|
8684c3b438a4a4e8,6669717171717171,6246697171717171 |
Generic phishing page with unclear attack methodology. May use social engineering, brand impersonation, or other tactics to deceive victims.
Malicious code is obfuscated using 1 techniques to evade detection by security scanners and make reverse engineering more difficult.
Pages with identical visual appearance (based on perceptual hash)