Report - bet73045.com/poker/186

Report Overview

Visitedpublic

2025-07-06 11:07:54

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
bet73045.com	unknown	2025-04-12	2025-06-12	2025-07-02	2.0 kB	49 kB	38.47.246.10
3f38sfb.segrft.com	unknown	2022-03-19	2023-09-14	2025-07-05	456 B	1.5 kB	20.2.192.47

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2025-07-03	medium	bet73045.com/	Bet365

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-07-06	medium	bet73045.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (2)

	URL	From	Size	First Seen	Last Seen
	bet73045.com/plus/js/unite/crypto-js.min.js	ScriptElement	48 kB	2023-03-07	2025-08-02
URL bet73045.com/plus/js/unite/crypto-js.min.js IP / ASN 38.47.246.10 #140227 Hong Kong Communications International Co., Limited Introduced by ScriptElement Embedded false Resource Info First Seen 2023-03-07 Last Seen 2025-08-02 Times Seen 57878 Size 48 kB (47992 bytes) MD5 cf3402d7483b127ded4069d651ea4a22 SHA1 bde186152457cacf9c35477b5bdda5bcb56b1f45 SHA256 eab5d90a71736f267af39fdf32caa8c71673fd06703279b01e0f92b0d7be0bfc Format Code Loading...

	bet73045.com/js/www/decrypt.js	ScriptElement	531 B	2023-12-21	2025-08-01
URL bet73045.com/js/www/decrypt.js IP / ASN 38.47.246.10 #140227 Hong Kong Communications International Co., Limited Introduced by ScriptElement Embedded false Resource Info First Seen 2023-12-21 Last Seen 2025-08-01 Times Seen 1971 Size 531 B (531 bytes) MD5 1d1d23f897c7f9fa4b24eeb8159d7e21 SHA1 9c6ab5fed65abe81454978f1e844c4f36d61a1c7 SHA256 8da1db8adc85dc835413880c71cc811c762e48018590f9a991115e83a722c869 Format Code Loading...

HTTP Transactions (3)

URL IP Response Size

GET bet73045.com/js/www/decrypt.js

38.47.246.10

200 OK

531 B

URL

bet73045.com/js/www/decrypt.js

IP / ASN

38.47.246.10

#140227 Hong Kong Communications International Co., Limited

Requested byhttps://bet73045.com/poker/186

Resource Info

File typeASCII text

First Seen2023-12-21

Last Seen2025-08-01

Times Seen1971

Size531 B (531 bytes)

MD51d1d23f897c7f9fa4b24eeb8159d7e21

SHA19c6ab5fed65abe81454978f1e844c4f36d61a1c7

SHA2568da1db8adc85dc835413880c71cc811c762e48018590f9a991115e83a722c869

Certificate Info

IssuerLet's Encrypt

Subjectbet73045.com

FingerprintD2:3A:FC:FB:BD:5E:F2:08:69:7F:FE:E7:98:F3:91:47:DC:30:48:F6

ValidityThu, 12 Jun 2025 08:33:13 GMT - Wed, 10 Sep 2025 08:33:12 GMT

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Bet365
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/www/decrypt.js HTTP/1.1
Host: bet73045.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bet73045.com/poker/186
Cookie: XSRF-TOKEN=eyJpdiI6InBqRU13T25VWHRaMjFYdXFkTndaamc9PSIsInZhbHVlIjoiN1pnaVZ1MlhTK1l1NkJ5SWtEME93c2doQlNcL0hITktwRDZ2OW1NZXU2QjBCWFdvcmViTHpDQmx6U1RsZWMxZDE5UjNcLyt5WGxGYU9lcUhNNk04bWpTdz09IiwibWFjIjoiMDRhZDAwYjU0Nzk2NjE5YjJmODFlZTcwNTg5OWZmYWY0Y2ZiNTBjM2RjNGQwNGZhODI0MWVhZTkzM2JmYWQxZSJ9; vanguard_session=eyJpdiI6InMwZ1I3ZG40ekFhYThFNmhnWU5vb2c9PSIsInZhbHVlIjoiaGF6R000Qkp1OXFcL1RkblFQYTBkRm9YUEhxQlRiU0FjaWs2MGdOSFYwZDdObWlIaWd0MzFzdVNTUWRtWEJLR1BsbVJSOWo3SGNucDFiSDJUY3EyK0VnPT0iLCJtYWMiOiJjOGZlMTUxYjA4MDYwZjI5MjgzODRlYjQxMjgxMjkzNmIxYmMzMTQ4NTIxNmI5ODZkZTJkNTcwMDNmZjUxNGM1In0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 06 Jul 2025 11:07:37 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Fri, 17 Nov 2023 09:01:25 GMT
ETag: W/"65572be5-213"
Alt-Svc: h3="2ba27113.t74nx2b2.com:443";ma=604800;persist=1,h2="b83.tuf3a353.com:443";ma=604800;persist=1
Content-Encoding: gzip
Server: nginx

GET bet73045.com/plus/js/unite/crypto-js.min.js

38.47.246.10

200 OK

48 kB

URL

bet73045.com/plus/js/unite/crypto-js.min.js

IP / ASN

38.47.246.10

#140227 Hong Kong Communications International Co., Limited

Requested byhttps://bet73045.com/poker/186

Resource Info

File typeJavaScript source, ASCII text, with very long lines (47992), with no line terminators

First Seen2023-03-07

Last Seen2025-08-02

Times Seen57878

Size48 kB (47992 bytes)

MD5cf3402d7483b127ded4069d651ea4a22

SHA1bde186152457cacf9c35477b5bdda5bcb56b1f45

SHA256eab5d90a71736f267af39fdf32caa8c71673fd06703279b01e0f92b0d7be0bfc

Certificate Info

IssuerLet's Encrypt

Subjectbet73045.com

FingerprintD2:3A:FC:FB:BD:5E:F2:08:69:7F:FE:E7:98:F3:91:47:DC:30:48:F6

ValidityThu, 12 Jun 2025 08:33:13 GMT - Wed, 10 Sep 2025 08:33:12 GMT

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Bet365
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /plus/js/unite/crypto-js.min.js HTTP/1.1
Host: bet73045.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bet73045.com/poker/186
Cookie: XSRF-TOKEN=eyJpdiI6InBqRU13T25VWHRaMjFYdXFkTndaamc9PSIsInZhbHVlIjoiN1pnaVZ1MlhTK1l1NkJ5SWtEME93c2doQlNcL0hITktwRDZ2OW1NZXU2QjBCWFdvcmViTHpDQmx6U1RsZWMxZDE5UjNcLyt5WGxGYU9lcUhNNk04bWpTdz09IiwibWFjIjoiMDRhZDAwYjU0Nzk2NjE5YjJmODFlZTcwNTg5OWZmYWY0Y2ZiNTBjM2RjNGQwNGZhODI0MWVhZTkzM2JmYWQxZSJ9; vanguard_session=eyJpdiI6InMwZ1I3ZG40ekFhYThFNmhnWU5vb2c9PSIsInZhbHVlIjoiaGF6R000Qkp1OXFcL1RkblFQYTBkRm9YUEhxQlRiU0FjaWs2MGdOSFYwZDdObWlIaWd0MzFzdVNTUWRtWEJLR1BsbVJSOWo3SGNucDFiSDJUY3EyK0VnPT0iLCJtYWMiOiJjOGZlMTUxYjA4MDYwZjI5MjgzODRlYjQxMjgxMjkzNmIxYmMzMTQ4NTIxNmI5ODZkZTJkNTcwMDNmZjUxNGM1In0%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 06 Jul 2025 11:07:37 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Thu, 13 Jan 2022 09:57:12 GMT
ETag: W/"61dff778-bb78"
Alt-Svc: h3="2ba27113.t74nx2b2.com:443";ma=604800;persist=1,h2="b83.tuf3a353.com:443";ma=604800;persist=1
Content-Encoding: gzip
Server: nginx

GET 3f38sfb.segrft.com/images_plus/main/favicon.ico?ver=1598008032

20.2.192.47

200 OK

1.2 kB

URL

3f38sfb.segrft.com/images_plus/main/favicon.ico?ver=1598008032

IP / ASN

20.2.192.47

#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested byhttps://bet73045.com/poker/186

Resource Info

File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel

First Seen2023-05-01

Last Seen2025-08-01

Times Seen3215

Size1.2 kB (1150 bytes)

MD5e13f45bbeb4b9056cfa3d6bd2453f70f

SHA1dfc879f8f7279ec929478feee93d9b2fdacce0b1

SHA256331b713de169d0e56bc71fee2c7df0795b24d5b24c045b3af1a27668783a1d2b

Certificate Info

IssuerSectigo Limited

Subject*.segrft.com

Fingerprint87:17:94:DA:1E:D4:8F:F0:18:04:89:1E:F0:56:9D:83:9F:6F:14:6B

ValidityFri, 20 Jun 2025 00:00:00 GMT - Sat, 20 Jun 2026 23:59:59 GMT

HTTP Headers

GET /images_plus/main/favicon.ico?ver=1598008032 HTTP/1.1
Host: 3f38sfb.segrft.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bet73045.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 06 Jul 2025 11:07:41 GMT
Content-Type: image/x-icon
Content-Length: 1150
Connection: keep-alive
Last-Modified: Fri, 21 Aug 2020 11:07:12 GMT
ETag: "5f3faae0-47e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Server: CDNoh
X-Cache-Status: HIT
Accept-Ranges: bytes