Systems and methods for phishing and brand protection

A storage disk or storage device comprising computer-executable instructions which, when executed by a processor, cause the processor to at least:

• determine a first hash of a first image in a webpage and a second hash of a second image in the webpage, the second image different from the first image, the first hash different from the second hash;
• generate a temporary page profile associated with the webpage based on the first hash and the second hash;
• fuzzy match the temporary page profile to a baseline page profile;
• and
• in response to a determination that the temporary page profile does not match the baseline page profile, generate an alert to indicate that fraud has been detected for the webpage.

A method to detect fraud in a webpage, the method comprising:

• determine, by executing an instruction with a processor, a first hash of a first image in a webpage and a second hash of a second image in the webpage, the second image different from the first image, the first hash different from the second hash;
• generating a temporary page profile associated with the webpage based on the first hash and the second hash;
• fuzzy matching the temporary page profile to a baseline page profile;
• and
• in response to a determination that the temporary page profile does not match the baseline page profile, generating an alert to indicate that fraud has been detected for the webpage.