Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1A45143B46013482B166783C16D655B3A33C6674EDE8A598002FDC3DEDEC7CC6D46B0CA |
|
CONTENT
ssdeep
|
48:nzzNmTNM11rc3L7B22gT73Xhga13Ig+FSUFEnwyTu7p2hgx8:nz7JcPB2Hhga13j+FSeewyOIw8 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
8c59267333ccf326 |
|
VISUAL
aHash
|
9818181818381b03 |
|
VISUAL
dHash
|
319432b23263b727 |
|
VISUAL
wHash
|
bf1818181c3f3f87 |
|
VISUAL
colorHash
|
380020080c0 |
|
VISUAL
cropResistant
|
319432b23263b727 |
Fake Kamirai page designed to appear in search results and trick users into visiting. May redirect to credential harvesting pages, malware downloads, or serve as a trust-building step before requesting sensitive information.
Malicious code is obfuscated using 1872 techniques to evade detection by security scanners and make reverse engineering more difficult.