EN ES PT
Back to Stats

Visual Capture

Screenshot of bet83091.com

Detection Info

http://bet83091.com/fish/61
Detected Brand
Unknown
Country
International
Confidence
100%
HTTP Status
200
Report ID
549a22ee-41e…
Analyzed
2026-01-13 23:36
Final URL (after redirects)
https://bet83091.com/fish/61#

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T1C0E20FB09156AA3B02F392E1BBB52B5FB3C5E2C9D903470516FCD39D4FCAE84E922151
CONTENT ssdeep
384:dqjjskc+VWV/YQJQ6QbQioWCygUyD084mR8m9RdlzK:dqPxc+Vo/Y+Q6QbQioZ1WQ8yRK

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
929347733767458c
VISUAL aHash
ffffff87ff000000
VISUAL dHash
4d38e00d38c06961
VISUAL wHash
ffff7f07cf000000
VISUAL colorHash
03001000380
VISUAL cropResistant
0c00080880e2f8fc,899b920e1c314105,24d2c0b2b2c0d222,c8399ccae273fbc2,ce92b171a58ab3b7,4d38e00d38c06961

Code Analysis

Risk Score 100/100
Threat Level ALTO
āš ļø Phishing Confirmed
šŸŽ£ Credential Harvester šŸŽ£ OTP Stealer šŸŽ£ Card Stealer šŸŽ£ Banking šŸŽ£ Personal Info

šŸ”¬ Threat Analysis Report

• Threat: Credential harvesting phishing kit
• Target: bet365 users internationally
• Method: Fake login form stealing user credentials
• Exfil: Data sent to unknown server
• Indicators: Domain mismatch, obfuscated JavaScript, recent domain registration
• Risk: HIGH - Immediate credential theft

šŸ” Credential Harvesting Forms

šŸ”’ Obfuscation Detected

  • eval
  • fromCharCode
  • unescape
  • document.write
  • hex_escape
  • unicode_escape
  • base64_strings

šŸŽÆ Kit Endpoints

  • //3f38sfb.segrft.com/plus/css/unite/login_unite.css?ver=1614680239
  • //3f38sfb.segrft.com/plus/css/custom/login_modal_custom.css?ver=1726650059?v=1768350506
  • /login_action
  • #normalLogin
  • //3f38sfb.segrft.com/plus/js/custom/login.js?ver=1597629260
  • //3f38sfb.segrft.com/plus/css/unite/login_modal_unite.css?ver=1738950076?v=1768350506
  • //3f38sfb.segrft.com/plus/js/custom/login_custom.js?ver=1598008226
  • //3f38sfb.segrft.com/plus/css/custom/login_custom.css?ver=1663905027

šŸ“” API Calls Detected

  • /mbuhx0as4kui
  • /prizedraw/default
  • /forgot
  • https://1hh1n2l4.00oiiamw.com/chatwindow.aspx?siteId=60001038&planId=ce938562-5837-4db2-9aee-934d6d6e8549
  • /loadGame/

šŸ“¤ Form Action Targets

  • /login_action

Similar Websites

Pages with identical visual appearance (based on perceptual hash)

😰
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.