EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Visual Capture

Screenshot of opportunitybank.gr.com

Detection Info

https://opportunitybank.gr.com/
Detected Brand
Opportunity Bank
Country
International
Confidence
100%
HTTP Status
200
Report ID
24e62a79-429…
Analyzed
2026-06-14 11:11

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T1CA62B732B210313F129702C1BF52271EE26A9543E1161E1889FDA35D4BE9F8DEE36F56
CONTENT ssdeep
384:xK1gCNcowjlIIAA2YiHPAjtJbsEC6PCfRP+0Fs1:xK1gCNc5II43PIzs6PmK

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
8343fe1839f3413e
VISUAL aHash
0000000000ffffff
VISUAL dHash
ccc7c7ddfff82822
VISUAL wHash
0030700103ffffff
VISUAL colorHash
0a0000001c0
VISUAL cropResistant
f0042d2d2cc4222b,ccc7c7c7cddfeff8

Code Analysis

Risk Score 65/100
Threat Level ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 Banking

🔬 Threat Analysis Report

• Threat: Phishing/Credential Harvesting
• Target: Opportunity Bank customers
• Method: Typosquatting/Domain spoofing
• Exfil: User login credentials
• Indicators: Mismatched domain (gr.com)
• Risk: High

🎯 Kit Endpoints

  • login.html
  • login.php

📊 Risk Score Breakdown

Total Risk Score
95/100

Contributing Factors

Domain Reputation
Non-standard/suspicious domain suffix for a bank.

🔬 Comprehensive Threat Analysis

Threat Type
Banking Credential Harvester
Target
Opportunity Bank users (International)
Attack Method
Brand impersonation
Exfiltration Channel
Form submission (backend endpoint not detected - likely JavaScript-based)
Risk Assessment
HIGH - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

  • Kit types: Credential Harvester, Banking

🏢 Brand Impersonation Analysis

Impersonated Brand
Opportunity Bank
Official Website
Unknown
Fake Service
Banking Portal

Fraudulent Claims

⚔️ Attack Methodology

Primary Method: Credential Harvesting

The site mimics a legitimate banking portal to solicit login information from victims.

Secondary Method: Domain Spoofing

Uses a domain that sounds professional but is not registered to the entity.

🌐 Infrastructure Indicators of Compromise

Domain Information

Domain
opportunitybank.gr.com
Registered
Unknown
Registrar
Unknown
Status
Suspicious

🤖 AI-Extracted Threat Intelligence

😰
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.