Analysing Phishing
Visualisation tools
- URL2PNG (provide PNG screenshot
- URLScan (information and screenshot)
Artefact reputation tools
These are tools to determine if a URL is malicious. If it comes back as not malicious it does not mean that it is definitely safe.
- Virus total
- URLScan.io
Monitoring
- https://urlhaus.abuse.ch/
- https://www.phishtank.com/
-
File Reputation tools
- VirusTotal
- Talos File Reputation (search for sha256 hashes against a database)
Sandboxing
- https://www.hybrid-analysis.com/
- Use to get a report of malware which