EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Visual Capture

Screenshot of k36588.cc

Detection Info

http://k36588.cc
Detected Brand
Unknown - Sports/Gambling
Country
International
Confidence
100%
HTTP Status
200
Report ID
29543638-1b9…
Analyzed
2026-03-17 00:44
Final URL (after redirects)
http://k36588.cc/

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T16631AC3184C48CAF0692C7E8CA36761BF2C6835DD7136B0585FA47AE2B49E66CC47C45
CONTENT ssdeep
24:hPCcHIdT/u4F0lC9HXHJbqRHXHJaVG62DQCa5PUR/2DQJY92t6dT:hHgu4F0lIbGaVG66Qc6QJSHdT

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
8dad624a3c879d8d
VISUAL aHash
10183e1a18183800
VISUAL dHash
a1f2f23232f0f0cc
VISUAL wHash
187e3f3f187c7c00
VISUAL colorHash
39600008001
VISUAL cropResistant
8c96968eaaaa869e,a1f2f23232f0f0cc

Code Analysis

Risk Score 77/100
Threat Level ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 Personal Info

πŸ”¬ Threat Analysis Report

β€’ Threat: Phishing
β€’ Target: Unsuspecting users
β€’ Method: Deception, exploiting interest in gambling.
β€’ Exfil: Unknown (due to obfuscation)
β€’ Indicators: Obfuscation, recent domain, suspicious claims.
β€’ Risk: High

πŸ”’ Obfuscation Detected

  • eval
  • unescape
  • hex_escape
  • unicode_escape

πŸ“‘ API Calls Detected

  • POST

πŸ“Š Risk Score Breakdown

Total Risk Score
90/100

Contributing Factors

Domain Age
Very recent domain registration (40 days).
Obfuscation
Obfuscation detected.
Content/Context
Deceptive content, promotional claims, unlikely promises.

πŸ”¬ Comprehensive Threat Analysis

Threat Type
Credential Harvesting Kit
Target
Unknown - Sports/Gambling users (International)
Attack Method
obfuscated JavaScript
Exfiltration Channel
Form submission (backend endpoint not detected - likely JavaScript-based)
Risk Assessment
HIGH - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

  • Kit types: Credential Harvester, Personal Info
  • 36 obfuscation techniques

🏒 Brand Impersonation Analysis

Impersonated Brand
Unknown
Fake Service
Gambling and Bonus

Fraudulent Claims

βš”οΈ Attack Methodology

Primary Method: Credential Harvesting

The site likely attempts to harvest credentials or other personal information through phishing tactics, by enticing users with promotions.

Secondary Method: Malware distribution

The site could lead to the download or installation of malicious software.

🌐 Infrastructure Indicators of Compromise

Domain Information

Domain
k36588.cc
Registered
2024-03-05
Registrar
NameSilo, LLC
Status
clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited, serverTransferProhibited, serverUpdateProhibited, serverDeleteProhibited

πŸ€– AI-Extracted Threat Intelligence

Similar Websites

Pages with identical visual appearance (based on perceptual hash)

Screenshot
Unknown (Sports Betting/Gambling)
https://3659uuu.cc
Mar 17, 2026
 Screenshot
K8, Atletico Madrid (Likely, based on the logo and association)
https://3656b.vip
Mar 17, 2026
 Screenshot
K8 凯发
http://www.p36588.cc
Jan 01, 2026
 Screenshot
Atletico Madrid
https://www.3656b.vip
Jan 01, 2026
 Screenshot
K8凯发 & AtlΓ©tico de Madrid
http://025saibo.com
Dec 31, 2025
😰
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.