Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T194D21EB09156AA3B02F392F1AB752B6FB3C5E2C8D943070526F8C75D5FCEE84E921152 |
|
CONTENT
ssdeep
|
384:dSjgkc+VWCMPBujYbEIbCygUyD084mR8m9RdlzK:dSpc+VlMpu0bW1WQ8yRK |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
ce8293f1f1e18c8e |
|
VISUAL
aHash
|
ff141030301c3838 |
|
VISUAL
dHash
|
4c6d656264706060 |
|
VISUAL
wHash
|
ff0410393e3e3e38 |
|
VISUAL
colorHash
|
0f000000e00 |
|
VISUAL
cropResistant
|
4c6d656264706060 |
• Amenaza: Kit de phishing para robo de credenciales
• Objetivo: Usuarios de bet365 a nivel internacional
• Método: Formulario falso que roba credenciales de usuario
• Exfil: Posible exfiltración de datos a través de formularios
• Indicadores: Dominio no coincidente, JavaScript ofuscado, registro de dominio reciente
• Riesgo: ALTO - Robo inmediato de credenciales
Pages with identical visual appearance (based on perceptual hash)
Found 8 other scans for this domain