Phishing Analysis
Detailed analysis of captured phishing page
Captura Visual
Información de Detección
https://b45033.com/forgot
Detected Brand
Bet365
Country
International
Confianza
100%
HTTP Status
200
Report ID
d6ae3233-9a6…
Analyzed
2026-01-01 04:27
Final URL (after redirects)
https://b45033.com/forgot#
Hashes de Contenido (Similitud HTML)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T156E231B09156AA7B02F392E1A7762F6FA3D5E2C8D902070426FCC35D8FDFE54E921161 |
|
CONTENT
ssdeep
|
384:sWL4V8+zdULc/so12o2yCygUyD084mR8m9BoL2mko:sWq8+zdF/so1HM1WQ8yeko |
Hashes Visuales (Similitud de Captura)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c74702b0b8b9674f |
|
VISUAL
aHash
|
000000ffffffffff |
|
VISUAL
dHash
|
4c6460323c0e0008 |
|
VISUAL
wHash
|
000000c6e7e7ffff |
|
VISUAL
colorHash
|
0f000000c00 |
|
VISUAL
cropResistant
|
64613a304f0c0008,4c4d486464614234 |
Análisis de Código
Risk Score
95/100
Nivel de Amenaza
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Card Stealer
🎣 Banking
🎣 Personal Info
🔬 Threat Analysis Report
• Amenaza: Phishing para robo de credenciales
• Objetivo: Usuarios de bet365
• Método: Formulario de inicio de sesión falso que intenta robar credenciales
• Exfil: Exfiltración de datos a través de /login_action
• Indicators: Dominio no coincidente, ofuscación de JavaScript, envío de formularios a través de JavaScript
• Riesgo: ALTO - Robo de credenciales
🔐 Credential Harvesting Forms
🔒 Obfuscation Detected
- eval
- fromCharCode
- unescape
- document.write
- hex_escape
- unicode_escape
- base64_strings
🎯 Kit Endpoints
- //5getfab.segrft.com/plus/css/unite/login_modal_unite.css?ver=1738950076?v=1767241598
- //5getfab.segrft.com/js/www/login.js?ver=1606790076
- //5getfab.segrft.com/plus/css/unite/login_unite.css?ver=1614680240
- //5getfab.segrft.com/plus/js/custom/login_custom.js?ver=1606790105
- //5getfab.segrft.com/plus/css/custom/login_modal_custom.css?ver=1726649910?v=1767241598
- /login_action
- //5getfab.segrft.com/plus/css/custom/login_custom.css?ver=1663905027
- #normalLogin
📡 API Calls Detected
- https://o1sg5qe2.suu91971.com/chatwindow.aspx?siteId=60001040&planId=a661d344-4f9a-4456-8cec-779bda797109
- /prizedraw/default
- /loadGame/
- /forgot
- /mbuhx0as4kui
📤 Form Action Targets
- /login_action
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Scan History for b45033.com
Found 10 other scans for this domain
"Nunca pensé que me pasaría a mí"
Esto dicen las 2.3 millones de víctimas cada año. No esperes a ser una estadística.