SafeMode - Analysis: www.3656b.vip

Visual Capture

Detection Info

https://www.3656b.vip

Detected Brand

Atletico Madrid

Country

International

Confidence

100%

HTTP Status

200

Report ID

396e3b0b-e69…

Analyzed

2026-01-01 15:59

Final URL (after redirects)

https://www.3656b.vip/

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T14431DD31C0C48CEF0656C7E88A367B2BF2C6871CC7036A0585FA47AE674AD66CC07C85
CONTENT ssdeep	24:tCcH4/u4F0lC9HXHJbqQHXHJaVw62qZA6UR/2DQAJ926u6dT:lH6u4F0lIbjaVw6+6QATldT

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	8dad624a3c879d8d
VISUAL aHash	10183e1a18183800
VISUAL dHash	a1f2f23232f0f0cc
VISUAL wHash	187e3f3f187c7c00
VISUAL colorHash	39600008001
VISUAL cropResistant	8c96968eaaaa869e,a1f2f23232f0f0cc

Code Analysis

Risk Score 90/100

Threat Level ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: Brand impersonation and redirection to a gambling site
• Target: Atletico Madrid fans globally, especially in Asia
• Method: Use of the Atletico Madrid brand to lure users to a gambling site.
• Exfil: Potentially redirects to a site for data harvesting or fraudulent activities.
• Indicators: Domain mismatch, Atletico Madrid Logo, possible Redirection to another site.
• Risk: HIGH - Misleading users with a fake domain associated with the brand.