Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T168A3AB30A24DFD2741B3C1F26AB37A6EA581D64ED813975126F8C36CEBC9D84FC26914 |
|
CONTENT
ssdeep
|
1536:bjc+V/6sVJVbNVqMVxVfNVQMVJVb36fy1tbKHtCtG2FAQ8yM:7P1N8MrNNeMP1ah |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
8ecf86f1b1b1218e |
|
VISUAL
aHash
|
ff3810080c143c1c |
|
VISUAL
dHash
|
4c6565f8d929a5a5 |
|
VISUAL
wHash
|
ff3c103c1c3c3c3c |
|
VISUAL
colorHash
|
0e000008c00 |
|
VISUAL
cropResistant
|
d9e9b4b4e88cf013,4c6565f8d929a5a5 |
• Amenaza: Kit de phishing para robo de credenciales
• Objetivo: Usuarios de bet365 internacionalmente
• Método: Formulario falso que roba credenciales de usuario
• Exfil: Datos enviados a servidor desconocido
• Indicadores: Dominio no coincide, JavaScript ofuscado, envío de formulario
• Riesgo: ALTO - Robo inmediato de credenciales
Found 8 other scans for this domain