Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1E5F22F70A156AA7B02F382F1AB756B6FB3D1E2C8D943470426F8835D9FCBE84ED21151 |
|
CONTENT
ssdeep
|
384:ddgUTxlD58g+VW97zJCygUyD084mR8m9Rd6z/YBN5BnA89A:dd9X8g+V67Q1WQ8yYKLF9A |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
cb1e21728fd28ecc |
|
VISUAL
aHash
|
00003c3c3c38c0fb |
|
VISUAL
dHash
|
4c9b6169692b92ab |
|
VISUAL
wHash
|
00003c3c3cfdfafb |
|
VISUAL
colorHash
|
01000000e00 |
|
VISUAL
cropResistant
|
cc82155586664c46,c6a6a6b6b6a6a6b6,363e7a3a98199ab3,4c9b6169692b92ab |
• Threat: Gambling/Betting account phishing
• Target: Bet365 users
• Method: Fake login form on unofficial domain harvesting usernames/passwords
• Exfil: Data likely sent to attacker-controlled server
• Indicators: Domain mismatch (bet73055.com vs bet365.com), login form present
• Risk: HIGH - Potential for account takeover and financial loss
Pages with identical visual appearance (based on perceptual hash)