SafeMode - Analysis: 09py5pg.com

Visual Capture

Detection Info

http://09py5pg.com

Detected Brand

K8凯发 and Atlético de Madrid

Country

Spain

Confidence

100%

HTTP Status

200

Report ID

11c8c19b-ff7…

Analyzed

2025-12-31 06:25

Final URL (after redirects)

http://09py5pg.com/

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T10031DD31C4C48CFF0656C7E88A367B2BF2D28718CB036A0585E947AE664AD26CC07885
CONTENT ssdeep	24:tCcH4/u4F0lC9HXHJbqSMHXHJaVY62qZA6UR/2X926u6dT:lH6u4F0lIbGaVY6+cldT

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	8dad624a3c879d0f
VISUAL aHash	10183e1a18183800
VISUAL dHash	a1f2f23232f0f0cc
VISUAL wHash	187e3f3f187c7c00
VISUAL colorHash	39600008001
VISUAL cropResistant	8c96868eaaaa869e,a1f2f23232f0f0cc

Code Analysis

Risk Score 90/100

Threat Level ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: Brand impersonation phishing attempting to lure users to a malicious site.
• Target: Fans of Atletico Madrid football club in Asia.
• Method: Displaying Atletico Madrid branding on a site with a unrelated domain to deceive users.
• Exfil: Unknown, likely redirecting users to gambling or scam sites.
• Indicators: New domain, domain mismatch, Atletico Madrid imagery on a unrelated domain (09py5pg.com).
• Risk: HIGH - Potential redirection to gambling/scam sites targeting Atletico Madrid fans.