Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1E3F22F709056AA3B02F392F16BB53B5EB3C5E289D903070426F8D3AD8FDBE94ED21551 |
|
CONTENT
ssdeep
|
384:dqj9kc+VWRYQuf37at0SLoWCygUyD084mR8m9RdlzK:dquc+VOY7f37at0SLoZ1WQ8yRK |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9ec393bd6f36c400 |
|
VISUAL
aHash
|
24ff7c0091bf061c |
|
VISUAL
dHash
|
4c29f12f33702ce8 |
|
VISUAL
wHash
|
24ff7c0091ff063c |
|
VISUAL
colorHash
|
00000000380 |
|
VISUAL
cropResistant
|
0c00080880e2f8fc,24d2c0b2b2c0d222,8dcdc8dc89b385aa,c3c65c729d97537a,737371734b4b370b,f9c7869616ea1ad4,4c29f12f33702ce8 |
• Ameaça: Kit de phishing para roubo de credenciais
• Alvo: Usuários do Bet365 internacionalmente
• Método: Formulário falso que rouba credenciais de usuário
• Exfil: Dados enviados para servidor desconhecido
• Indicadores: Domínio suspeito, JavaScript ofuscado, envio de formulário
• Risco: ALTO - Roubo imediato de credenciais
Found 8 other scans for this domain