SafeMode - Analysis: b45078.com

Visual Capture

No screenshot available

Detection Info

http://b45078.com/fish/255

Detected Brand

Bet365

Country

International

Confidence

100%

HTTP Status

200

Report ID

bddec2eb-f8a…

Analyzed

2025-12-21 01:04

Final URL (after redirects)

https://b45078.com/fish/255#

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1F2F24370911AAA7B02F392E167B96F5FB3D9A2C8D902070426FCC35DCFDEE54E921161
CONTENT ssdeep	384:CHrzv8+zdUL0/sQ5ftIoWCygUyD084mR8m9v2Lhmko:CHP8+zd3/sQ5lIoZ1WQ8yLko

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	c64744b8b0b92fc7
VISUAL aHash	ff3030ffffbfff00
VISUAL dHash	4d656189d22ce8c0
VISUAL wHash	7c20200fff9f7f00
VISUAL colorHash	09000000380
VISUAL cropResistant	8485d3c3e9f474f2,4d656189d22ce8c0

Code Analysis

Risk Score 70/100

Threat Level ALTO

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: Phishing attack impersonating Bet365 to steal login credentials.
• Target: Bet365 users.
• Method: Presents a login form on a website with a mismatched domain.
• Exfil: Likely to a malicious server to harvest credentials.
• Indicators: Domain does not match the official Bet365 domain. Uses Bet365 logo and branding.
• Risk: HIGH - Real-time credential theft possible.

🔐 Credential Harvesting Forms

🎯 Kit Endpoints

//5getfab.yrsm.net/plus/css/unite/login_modal_unite.css?ver=1738950076?v=1766279048
#normalLogin
/login_action
//5getfab.yrsm.net/plus/css/custom/login_modal_custom.css?ver=1726649910?v=1766279048
//5getfab.yrsm.net/js/www/login.js?ver=1606790076
//5getfab.yrsm.net/plus/css/custom/login_custom.css?ver=1663905027
//5getfab.yrsm.net/plus/js/custom/login_custom.js?ver=1606790105
//5getfab.yrsm.net/plus/css/unite/login_unite.css?ver=1614680240

📡 API Calls Detected

/forgot
/prizedraw/default
/mbuhx0as4kui
/loadGame/
https://o1sg5qe2.suu91971.com/chatwindow.aspx?siteId=60001040&planId=a661d344-4f9a-4456-8cec-779bda797109