SafeMode - Analysis: bet83080.com

Visual Capture

No screenshot available

Detection Info

http://bet83080.com/fish/173/

Detected Brand

Bet365

Country

International

Confidence

99%

HTTP Status

200

Report ID

6d493ba1-b82…

Analyzed

2025-12-23 13:16

Final URL (after redirects)

https://bet83080.com/fish/173/#

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1B1D201B09156AA3B02F392F1BBB52B5EB3C5E2C8D902470516FCD39D4FCBE84E922551
CONTENT ssdeep	384:dqjvr8g+VWaYKFBoWCygUyD084mR8m9Rd6zK:dqf8g+VhYoBoZ1WQ8yYK

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	9393537e3e654185
VISUAL aHash	ffff7f9fff000000
VISUAL dHash	4d28d03928c06161
VISUAL wHash	ffff7f05bf000000
VISUAL colorHash	03001000380
VISUAL cropResistant	0c00080880e2f8fc,f1b1b163746c31a0,24d2c0b2b2c0d222,4d28d03928c06161

Code Analysis

Risk Score 70/100

Threat Level ALTO

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: Credential harvesting phishing targeting Bet365 users.
• Target: Bet365 customers internationally.
• Method: The site presents a fake Bet365 login page to steal usernames and passwords.
• Exfil: Likely transmits data to an attacker-controlled server.
• Indicators: Domain name does not match Bet365's official domain, presence of a login form on homepage.
• Risk: HIGH - Immediate theft of user credentials.

🔐 Credential Harvesting Forms

🎯 Kit Endpoints

//3f38sfb.segrft.com/plus/js/custom/login_custom.js?ver=1598008226
//3f38sfb.segrft.com/plus/css/custom/login_custom.css?ver=1663905027
//3f38sfb.segrft.com/plus/css/unite/login_modal_unite.css?ver=1738950076?v=1766495222
/login_action
//3f38sfb.segrft.com/plus/js/custom/login.js?ver=1597629260
//3f38sfb.segrft.com/plus/css/unite/login_unite.css?ver=1614680239
#normalLogin
//3f38sfb.segrft.com/plus/css/custom/login_modal_custom.css?ver=1726650059?v=1766495222

📡 API Calls Detected

/forgot
/prizedraw/default
/mbuhx0as4kui
/loadGame/
https://1hh1n2l4.00oiiamw.com/chatwindow.aspx?siteId=60001038&planId=ce938562-5837-4db2-9aee-934d6d6e8549