SafeMode - Analysis: bet73060.com

Visual Capture

No screenshot available

Detection Info

http://bet73060.com/fish/104/

Detected Brand

bet365

Country

International

Confidence

99%

HTTP Status

200

Report ID

a3dd5375-359…

Analyzed

2025-12-23 13:16

Final URL (after redirects)

http://bet73060.com/fish/104/#

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1B6E21FB09156AA3B02F392F1BBB52B5EB3C5E2C9D903470516F8C39D4FCBE94E922151
CONTENT ssdeep	384:dqjQr8g+VWMYKTQjQmQDoWCygUyD084mR8m9Rd6zK:dqo8g+VLYiQjQmQDoZ1WQ8yYK

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	939343773e4f45c0
VISUAL aHash	ffff7f87ff000000
VISUAL dHash	4d98d02918c06961
VISUAL wHash	ffff7f07cf000000
VISUAL colorHash	03001000380
VISUAL cropResistant	0c00080880e3f8fc,8993924e1c314105,24d2c0b2b2c0d222,83a3a67c92f6cc5c,f8ca8aa7766e3a1a,ec6979ece88ead7c,4d98d02918c06961

Code Analysis

Risk Score 70/100

Threat Level ALTO

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: Credential harvesting phishing
• Target: bet365 users
• Method: Fake login form stealing credentials
• Exfil: Unknown data exfiltration point
• Indicators: Domain mismatch, new domain, bet365 branding
• Risk: HIGH - Real-time credential theft

🔐 Credential Harvesting Forms

🎯 Kit Endpoints

//3f38sfb.segrft.com/plus/js/custom/login_custom.js?ver=1598008226
//3f38sfb.segrft.com/plus/css/custom/login_custom.css?ver=1663905027
//3f38sfb.segrft.com/plus/css/unite/login_modal_unite.css?ver=1738950076?v=1766495235
/login_action
//3f38sfb.segrft.com/plus/js/custom/login.js?ver=1597629260
//3f38sfb.segrft.com/plus/css/custom/login_modal_custom.css?ver=1726650059?v=1766495235
//3f38sfb.segrft.com/plus/css/unite/login_unite.css?ver=1614680239
#normalLogin

📡 API Calls Detected

/forgot
/prizedraw/default
/mbuhx0as4kui
/loadGame/
https://1hh1n2l4.00oiiamw.com/chatwindow.aspx?siteId=60001038&planId=ce938562-5837-4db2-9aee-934d6d6e8549