Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1BFD200B09156AA3B02F392F1BBB52B5EB3C5E2C8D902470516FCD39D4FCBE84E922551 |
|
CONTENT
ssdeep
|
384:dqj1r8g+VWcYgVZoWCygUyD084mR8m9Rd6zK:dqN8g+V/YqZoZ1WQ8yYK |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
92b35367be6d4181 |
|
VISUAL
aHash
|
ffffff9fff000000 |
|
VISUAL
dHash
|
4d28d02928c06161 |
|
VISUAL
wHash
|
ffff7f05bf000000 |
|
VISUAL
colorHash
|
03001000380 |
|
VISUAL
cropResistant
|
0c00080880e2f8fc,f1b1b163746c31a0,24d2c0b2b2c0d222,4d28d02928c06161 |
• Threat: Credential harvesting phishing targeting bet365 users.
• Target: bet365 customers.
• Method: Fake bet365 login page to steal usernames and passwords.
• Exfil: Unknown, likely custom API or database.
• Indicators: Domain name bet83066.com which is not the official bet365 domain, presence of a login form.
• Risk: HIGH - Real-time credential theft.
Pages with identical visual appearance (based on perceptual hash)
Found 10 other scans for this domain