Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
Detection Info
https://700662.com
Detected Brand
K8 (Gambling website)
Country
International
Confidence
100%
HTTP Status
200
Report ID
76a832bb-007…
Analyzed
2026-03-17 03:32
Final URL (after redirects)
https://700662.com/
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1A531BE31C0C4CDEF0A52C7D48B367B1BB2C68758D7136E0585EA47AE2B49D66CD47885 |
|
CONTENT
ssdeep
|
24:hPCcH4/u9tNG0lC9HXHJbqPHXHJaVY62DQAfABZFUR/2e92T6dT:hH6u9XG0lIbMaVY66QA60R5dT |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c96636cdf09c9c62 |
|
VISUAL
aHash
|
1000187e78181800 |
|
VISUAL
dHash
|
b4c4b2b2b23232cc |
|
VISUAL
wHash
|
5c6278fff8ba9800 |
|
VISUAL
colorHash
|
39c00010000 |
|
VISUAL
cropResistant
|
8cb6b68e8ea626a6,b4c4b2b2b23232cc |
Code Analysis
Risk Score
77/100
Threat Level
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 Personal Info
🔬 Threat Analysis Report
• Threat: Phishing
• Target: K8 users
• Method: Impersonation with a misleading domain and potential malicious scripts.
• Exfil: Unknown (Obfuscation suggests potential data theft or redirection)
• Indicators: Domain mismatch, brand logo, incentive of winning prizes, obfuscation
• Risk: HIGH
🔒 Obfuscation Detected
- eval
- unescape
- hex_escape
- unicode_escape
📡 API Calls Detected
- POST
📊 Risk Score Breakdown
Total Risk Score
90/100
Contributing Factors
Domain Mismatch
The domain is not related to the brand K8. It's a completely random string.
Brand Impersonation
The site uses the K8 logo and brand elements, to lure visitors.
Obfuscation
Obfuscated javascript suggests malicious activity or data theft.
Reward Tactics
Offers of winning prizes are typical phishing techniques.
🔬 Comprehensive Threat Analysis
Threat Type
Credential Harvesting Kit
Target
K8 (Gambling website) users (International)
Attack Method
Brand impersonation + obfuscated JavaScript
Exfiltration Channel
Form submission (backend endpoint not detected - likely JavaScript-based)
Risk Assessment
HIGH - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)
⚠️ Indicators of Compromise
- Kit types: Credential Harvester, Personal Info
- 34 obfuscation techniques
🏢 Brand Impersonation Analysis
Impersonated Brand
K8
Fake Service
Gambling website
Fraudulent Claims
⚔️ Attack Methodology
Primary Method: Brand Impersonation
The attacker is trying to impersonate a popular gambling website (K8) using a confusing domain, hoping to trick visitors.
Secondary Method: Social Engineering
Offering winning prizes and other incentives to trick users into the website.
🌐 Infrastructure Indicators of Compromise
Domain Information
Domain
700662.com
Registered
2024-05-10
Registrar
Unknown
Status
ACTIVE
🤖 AI-Extracted Threat Intelligence
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.