Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T100F241709056AA3B02F392E167B96F6EB3D5E2C8D902070426FCC39D8FDFE54E921161 |
|
CONTENT
ssdeep
|
384:sxL8V8+zdUzv/so/v1UoWCygUyD084mR8m9BoLhmko:sxe8+zdK/so/dUoZ1WQ8ybko |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c74744b8b1b82dc7 |
|
VISUAL
aHash
|
ff3020ffffffff00 |
|
VISUAL
dHash
|
4d6561c9d22c68c0 |
|
VISUAL
wHash
|
3c20202fff9f7f00 |
|
VISUAL
colorHash
|
09000000380 |
|
VISUAL
cropResistant
|
8485d3c3e9f474f2,4d6561c9d22c68c0 |
• Threat: Brand impersonation phishing kit
• Target: Bet365 users
• Method: Fake Bet365 website attempting to steal login credentials.
• Exfil: Unknown, potentially credential harvesting via form submission to a malicious server.
• Indicators: Domain name mismatch, brand impersonation, captcha form.
Pages with identical visual appearance (based on perceptual hash)
Found 10 other scans for this domain