SafeMode - Analysis: bet73064.com

Captura Visual

No screenshot available

Informações de Detecção

http://bet73064.com/forgot

Detected Brand

bet365

Country

International

Confiança

95%

HTTP Status

200

Report ID

9cec044a-f8b…

Analyzed

2025-12-23 13:18

Final URL (after redirects)

http://bet73064.com/forgot#

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1ECD20DB09156AA3B02F392F1AB752B6EB3D5E2C8D942470426FCC35D5FCBF84E921151
CONTENT ssdeep	384:dajXr8g+VWtb2o2yCygUyD084mR8m9Rd6zK:daP8g+VGbHM1WQ8yYK

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	f5d50a8a22e355dc
VISUAL aHash	00ffffffffffff00
VISUAL dHash	4db2304e28000240
VISUAL wHash	0000dec2fffffb00
VISUAL colorHash	06000000e00
VISUAL cropResistant	36300e0e00080000,02624dcd4849344c,0000485040607165

Análise de Código

Risk Score 70/100

Nível de Ameaça ALTO

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: Credential harvesting phishing attack
• Target: bet365 users
• Method: Fake login form to steal usernames and passwords
• Exfil: Unknown data exfiltration point
• Indicators: Domain mismatch, impersonates bet365, uses a similar but unofficial domain name
• Risk: HIGH - Potential credential theft

🔐 Credential Harvesting Forms

🎯 Kit Endpoints

//3f38sfb.segrft.com/plus/js/custom/login_custom.js?ver=1598008226
//3f38sfb.segrft.com/plus/css/custom/login_custom.css?ver=1663905027
/login_action
//3f38sfb.segrft.com/plus/css/custom/login_modal_custom.css?ver=1726650059?v=1766495265
//3f38sfb.segrft.com/plus/css/unite/login_modal_unite.css?ver=1738950076?v=1766495265
//3f38sfb.segrft.com/plus/js/custom/login.js?ver=1597629260
//3f38sfb.segrft.com/plus/css/unite/login_unite.css?ver=1614680239
#normalLogin

📡 API Calls Detected

/forgot
/mbuhx0as4kui
/prizedraw/default
/loadGame/
https://1hh1n2l4.00oiiamw.com/chatwindow.aspx?siteId=60001038&planId=ce938562-5837-4db2-9aee-934d6d6e8549