Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1E3F22F709056AA3B02F392F16BB53B5EB3C5E289D903070426F8D3AD8FDBE94ED21551 |
|
CONTENT
ssdeep
|
384:dqj9kc+VWRYQuf37at0SLoWCygUyD084mR8m9RdlzK:dquc+VOY7f37at0SLoZ1WQ8yRK |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9ec393bd6f36c400 |
|
VISUAL
aHash
|
24ff7c0091bf061c |
|
VISUAL
dHash
|
4c29f12f33702ce8 |
|
VISUAL
wHash
|
24ff7c0091ff063c |
|
VISUAL
colorHash
|
00000000380 |
|
VISUAL
cropResistant
|
0c00080880e2f8fc,24d2c0b2b2c0d222,8dcdc8dc89b385aa,c3c65c729d97537a,737371734b4b370b,f9c7869616ea1ad4,4c29f12f33702ce8 |
• Amenaza: Kit de phishing para robo de credenciales
• Objetivo: Usuarios de Bet365 internacionalmente
• Método: Formulario falso que roba credenciales de usuario
• Exfil: Datos enviados a servidor desconocido
• Indicadores: Dominio sospechoso, JavaScript ofuscado, envío de formulario
• Riesgo: ALTO - Robo inmediato de credenciales
Found 8 other scans for this domain