Phishing Analysis
Detailed analysis of captured phishing page
Captura Visual
Informações de Detecção
https://opportunitybank.gr.com/
Detected Brand
Opportunity Bank
Country
International
Confiança
100%
HTTP Status
200
Report ID
24e62a79-429…
Analyzed
2026-06-14 11:11
Hashes de Conteúdo (Similaridade HTML)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1CA62B732B210313F129702C1BF52271EE26A9543E1161E1889FDA35D4BE9F8DEE36F56 |
|
CONTENT
ssdeep
|
384:xK1gCNcowjlIIAA2YiHPAjtJbsEC6PCfRP+0Fs1:xK1gCNc5II43PIzs6PmK |
Hashes Visuais (Similaridade de Captura)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
8343fe1839f3413e |
|
VISUAL
aHash
|
0000000000ffffff |
|
VISUAL
dHash
|
ccc7c7ddfff82822 |
|
VISUAL
wHash
|
0030700103ffffff |
|
VISUAL
colorHash
|
0a0000001c0 |
|
VISUAL
cropResistant
|
f0042d2d2cc4222b,ccc7c7c7cddfeff8 |
Análise de Código
Risk Score
65/100
Nível de Ameaça
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 Banking
🔬 Threat Analysis Report
• Ameaça: Phishing/Roubo de credenciais
• Alvo: Clientes do Opportunity Bank
• Método: Falsificação de domínio
• Exfil: Credenciais de login
• Indicadores: Domínio suspeito (gr.com)
• Risco: Alto
🎯 Kit Endpoints
- login.html
- login.php
📊 Detalhamento da Pontuação de Risco
Total Risk Score
95/100
Contributing Factors
Domain Reputation
Non-standard/suspicious domain suffix for a bank.
🔬 Análise Integral de Ameaças
Tipo de Ameaça
Banking Credential Harvester
Alvo
Opportunity Bank users (International)
Método de Ataque
Brand impersonation
Canal de Exfiltração
Form submission (backend endpoint not detected - likely JavaScript-based)
Avaliação de Risco
HIGH - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)
⚠️ Indicators of Compromise
- Kit types: Credential Harvester, Banking
🏢 Análise de Falsificação de Marca
Impersonated Brand
Opportunity Bank
Official Website
Unknown
Fake Service
Banking Portal
Fraudulent Claims
⚔️ Metodologia de Ataque
Primary Method: Credential Harvesting
The site mimics a legitimate banking portal to solicit login information from victims.
Secondary Method: Domain Spoofing
Uses a domain that sounds professional but is not registered to the entity.
🌐 Indicadores de Compromisso de Infraestrutura
Domain Information
Domínio
opportunitybank.gr.com
Registered
Unknown
Registrar
Unknown
Estado
Suspicious
🤖 AI-Extracted Threat Intelligence
"Nunca pensei que aconteceria comigo"
Isso dizem os 2,3 milhões de vítimas a cada ano. Não espere para ser uma estatística.