SafeMode - Analysis: b45036.com

Visual Capture

No screenshot available

Detection Info

http://b45036.com/sport/19

Detected Brand

Unknown

Country

International

Confidence

100%

HTTP Status

200

Report ID

5bd23983-d38…

Analyzed

2026-01-14 00:05

Final URL (after redirects)

https://b45036.com/sport/19#

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1F2E2207091669A7B02F392E0A7756B6F63C5E2C8D903071416F8C7ADCFCEF94E9250A1
CONTENT ssdeep	384:sILBMyzdiYz/szsRnrZCygUyD084mR8m9BoL2mko:sIuyzd9/szYrk1WQ8yeko

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	866c31d393b92cc7
VISUAL aHash	0000003c3c3c3c3c
VISUAL dHash	5d6465e9e96979f9
VISUAL wHash	ff10003c7c3e3e3c
VISUAL colorHash	0f000000c00
VISUAL cropResistant	828082949c983864,5d6465e9e96979f9

Code Analysis

Risk Score 85/100

Threat Level BAJO

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: Geo-restricted access
• Target: Users attempting to access from a restricted location
• Method: Displaying a 'Prohibited' message
• Exfil: No data exfiltration detected
• Indicators: Geo-restriction message, official brand website
• Risk: LOW - No active threat, access restriction only

🔐 Credential Harvesting Forms

🔒 Obfuscation Detected

eval
fromCharCode
unescape
document.write
hex_escape
unicode_escape
base64_strings

🎯 Kit Endpoints

//5getfab.segrft.com/plus/css/unite/login_unite.css?ver=1614680240
//5getfab.segrft.com/plus/css/custom/login_modal_custom.css?ver=1726649910?v=1768350921
/login_action
//5getfab.segrft.com/js/www/login.js?ver=1606790076
//5getfab.segrft.com/plus/js/custom/login_custom.js?ver=1606790105
#normalLogin
//5getfab.segrft.com/plus/css/unite/login_modal_unite.css?ver=1738950076?v=1768350921
//5getfab.segrft.com/plus/css/custom/login_custom.css?ver=1663905027

📡 API Calls Detected

https://o1sg5qe2.suu91971.com/chatwindow.aspx?siteId=60001040&planId=a661d344-4f9a-4456-8cec-779bda797109
/prizedraw/default
/mbuhx0as4kui
https://rrl.net2cast.com/cs/RnR.html?darkmode=&new-window=
https://www.bet365asiasports.com/#!/rules
POST
/forgot
https://web.fastcnregions.com/#/popup/?u=&action=help&page=faq&subsub=generalrulesforsports&sub=sport&lang=zhh
/loadGame/
http://rules.568win.com/rules/sports/cn/Rules.pdf