Phishing Analysis
Detailed analysis of captured phishing page
Captura Visual
Informações de Detecção
https://b45033.com/forgot
Detected Brand
Bet365
Country
International
Confiança
100%
HTTP Status
200
Report ID
d6ae3233-9a6…
Analyzed
2026-01-01 04:27
Final URL (after redirects)
https://b45033.com/forgot#
Hashes de Conteúdo (Similaridade HTML)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T156E231B09156AA7B02F392E1A7762F6FA3D5E2C8D902070426FCC35D8FDFE54E921161 |
|
CONTENT
ssdeep
|
384:sWL4V8+zdULc/so12o2yCygUyD084mR8m9BoL2mko:sWq8+zdF/so1HM1WQ8yeko |
Hashes Visuais (Similaridade de Captura)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c74702b0b8b9674f |
|
VISUAL
aHash
|
000000ffffffffff |
|
VISUAL
dHash
|
4c6460323c0e0008 |
|
VISUAL
wHash
|
000000c6e7e7ffff |
|
VISUAL
colorHash
|
0f000000c00 |
|
VISUAL
cropResistant
|
64613a304f0c0008,4c4d486464614234 |
Análise de Código
Risk Score
95/100
Nível de Ameaça
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Card Stealer
🎣 Banking
🎣 Personal Info
🔬 Threat Analysis Report
• Ameaça: Phishing para roubo de credenciais
• Alvo: Usuários do bet365
• Método: Formulário de login falso que tenta roubar credenciais
• Exfil: Exfiltração de dados via /login_action
• Indicators: Domínio incompatível, ofuscação de JavaScript, envio de formulário via JavaScript
• Risco: ALTO - Roubo de credenciais
🔐 Credential Harvesting Forms
🔒 Obfuscation Detected
- eval
- fromCharCode
- unescape
- document.write
- hex_escape
- unicode_escape
- base64_strings
🎯 Kit Endpoints
- //5getfab.segrft.com/plus/css/unite/login_modal_unite.css?ver=1738950076?v=1767241598
- //5getfab.segrft.com/js/www/login.js?ver=1606790076
- //5getfab.segrft.com/plus/css/unite/login_unite.css?ver=1614680240
- //5getfab.segrft.com/plus/js/custom/login_custom.js?ver=1606790105
- //5getfab.segrft.com/plus/css/custom/login_modal_custom.css?ver=1726649910?v=1767241598
- /login_action
- //5getfab.segrft.com/plus/css/custom/login_custom.css?ver=1663905027
- #normalLogin
📡 API Calls Detected
- https://o1sg5qe2.suu91971.com/chatwindow.aspx?siteId=60001040&planId=a661d344-4f9a-4456-8cec-779bda797109
- /prizedraw/default
- /loadGame/
- /forgot
- /mbuhx0as4kui
📤 Form Action Targets
- /login_action
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Scan History for b45033.com
Found 10 other scans for this domain
"Nunca pensei que aconteceria comigo"
Isso dizem os 2,3 milhões de vítimas a cada ano. Não espere para ser uma estatística.