Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T162441AF8935853F096874BD4F9715A0633A610EEFB924688C3B48AD0FBE2ED9D435C61 |
|
CONTENT
ssdeep
|
3072:MTDxHTa7jDw/4Q1pSBn1pSBy1pSB61pSBo1pSBafoi2cluAkYc1DI:MxW7jDw/47g7/to |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
cee131ce8e29cf30 |
|
VISUAL
aHash
|
00003c3c3c3c0000 |
|
VISUAL
dHash
|
a8d4e96969697904 |
|
VISUAL
wHash
|
007e7e7f7f7c0400 |
|
VISUAL
colorHash
|
39001000c00 |
|
VISUAL
cropResistant
|
8e8999e686a68799,a8d4e96969697904 |
• Ameaça: Phishing
• Alvo: Usuários do Bet365
• Método: Personificação com incentivos.
• Exfil: Potencialmente coletando credenciais.
• Indicadores: Incompatibilidade de domínio, domínio recente, ofertas de bônus
• Risco: Alto
The site attempts to steal user credentials by impersonating the legitimate Bet365 website. It likely redirects to a login form mimicking the legitimate site and steals credentials that are submitted.
The site uses incentives and warnings to manipulate the user into providing their credentials.
Pages with identical visual appearance (based on perceptual hash)