Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T15FE232718A561837033B84C9A0AAA76E61D3A14DD6130F14B3FC83BDABD9DB6741364E |
|
CONTENT
ssdeep
|
768:dHemm7WKnG14TpRwlomb44Yotm4YoAW4Yob4YoAhA8oEWKHQ3242L:dHemmSKnG14TpRwlomb44YoA4Yoz4Yol |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b8989b61c7c6c6e4 |
|
VISUAL
aHash
|
ff1cdfffc3c3c300 |
|
VISUAL
dHash
|
d891b56592968602 |
|
VISUAL
wHash
|
ff1c9dfdc1c1c100 |
|
VISUAL
colorHash
|
00000000e00 |
|
VISUAL
cropResistant
|
d891b56592968602 |
• Threat: Credential harvesting phishing attack
• Target: Bet365 users worldwide
• Method: Fake login form stealing usernames and passwords
• Exfil: Likely to a malicious server controlled by attackers (destination not visible in the image)
• Indicators: Domain mismatch, impersonation of Bet365, unusual domain name
• Risk: HIGH - Real-time credential theft possible
Pages with identical visual appearance (based on perceptual hash)
Found 2 other scans for this domain