EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Visual Capture

Screenshot of bet63b6.com

Detection Info

https://bet63b6.com/fish/260
Detected Brand
Unknown
Country
International
Confidence
100%
HTTP Status
200
Report ID
7aa3ca25-e13…
Analyzed
2026-01-21 12:12
Final URL (after redirects)
https://bet63b6.com/fish/260#

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T1E3F22F709056AA3B02F392F16BB53B5EB3C5E289D903070426F8D3AD8FDBE94ED21551
CONTENT ssdeep
384:dqj9kc+VWRYQuf37at0SLoWCygUyD084mR8m9RdlzK:dquc+VOY7f37at0SLoZ1WQ8yRK

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
9ec393bd6f36c400
VISUAL aHash
24ff7c0091bf061c
VISUAL dHash
4c29f12f33702ce8
VISUAL wHash
24ff7c0091ff063c
VISUAL colorHash
00000000380
VISUAL cropResistant
0c00080880e2f8fc,24d2c0b2b2c0d222,8dcdc8dc89b385aa,c3c65c729d97537a,737371734b4b370b,f9c7869616ea1ad4,4c29f12f33702ce8

Code Analysis

Risk Score 100/100
Threat Level ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: Credential harvesting phishing kit
• Target: Bet365 users internationally
• Method: Fake login form stealing user credentials
• Exfil: Data sent to unknown server
• Indicators: Suspicious domain, obfuscated JavaScript, form submission
• Risk: HIGH - Immediate credential theft

🔐 Credential Harvesting Forms

🔒 Obfuscation Detected

  • eval
  • fromCharCode
  • unescape
  • document.write
  • hex_escape
  • unicode_escape
  • base64_strings

🎯 Kit Endpoints

  • //3f38sfb.segrft.com/plus/js/custom/login.js?ver=1597629260
  • //3f38sfb.segrft.com/plus/css/custom/login_modal_custom.css?ver=1726650059?v=1769000182
  • //3f38sfb.segrft.com/plus/css/unite/login_modal_unite.css?ver=1738950076?v=1769000182
  • //3f38sfb.segrft.com/plus/css/unite/login_unite.css?ver=1614680239
  • //3f38sfb.segrft.com/plus/js/custom/login_custom.js?ver=1598008226
  • //3f38sfb.segrft.com/plus/css/custom/login_custom.css?ver=1663905027
  • /login_action
  • #normalLogin

📡 API Calls Detected

  • https://5sx5x5y.bipnzhh8.com/03694358abf04e8jkfle-keli6c4e59a3f8458672b518938744adfbd2b99a2ede4903545d86cda66e48a54429
  • /forgot
  • /loadGame/
  • /mbuhx0as4kui
  • /prizedraw/default

📤 Form Action Targets

  • /login_action

Scan History for bet63b6.com

Found 8 other scans for this domain

😰
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.