Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
Detection Info
https://8836511.org
Detected Brand
Unknown (Sports Betting, Atletico Madrid)
Country
International
Confidence
100%
HTTP Status
200
Report ID
cc758caf-a5eā¦
Analyzed
2026-03-17 03:38
Final URL (after redirects)
https://8836511.org/
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T19D318C3184C58CAF0692C7E8CA36761BF2C6835CD7136B0585FA47AE6B4AE66CC47885 |
|
CONTENT
ssdeep
|
24:hPCcHIdT/u4F0lC9HXHJbqu1HXHJaVm62DQCa5PUR/2DQJY92t6dT:hHgu4F0lIbH/aVm66Qc6QJSHdT |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
8dad624a3c879d0f |
|
VISUAL
aHash
|
10183e1a18183800 |
|
VISUAL
dHash
|
a1f2f23232f0f0cc |
|
VISUAL
wHash
|
187e3f3f187c7c00 |
|
VISUAL
colorHash
|
39600008001 |
|
VISUAL
cropResistant
|
8c96868eaaaa869e,a1f2f23232f0f0cc |
Code Analysis
Risk Score
77/100
Threat Level
ALTO
ā ļø Phishing Confirmed
š£ Credential Harvester
š£ Personal Info
š¬ Threat Analysis Report
ā¢ Threat: Phishing
ā¢ Target: Unclear, could be targeting sports bettors.
ā¢ Method: Malicious website, potentially to steal user data or spread malware.
ā¢ Exfil: Unknown, but could be related to financial information or account credentials. (see indicators)
ā¢ Indicators: Domain age, obfuscation, gambling content, promotional offers.
ā¢ Risk: High
š Obfuscation Detected
- eval
- unescape
- hex_escape
- unicode_escape
š” API Calls Detected
- POST
š Risk Score Breakdown
Total Risk Score
90/100
Contributing Factors
Obfuscation
Javascript obfuscation hides malicious activity
Domain mismatch
The domain doesn't align with the content, a classic phishing indicator.
Suspicious Content
High reward for registering, is often used to get users to trust the site.
Domain Age
Not a recent domain, indicating more than likely a newly set up site.
š¬ Comprehensive Threat Analysis
Threat Type
Credential Harvesting Kit
Target
Unknown (Sports Betting, Atletico Madrid) users (International)
Attack Method
obfuscated JavaScript
Exfiltration Channel
Form submission (backend endpoint not detected - likely JavaScript-based)
Risk Assessment
HIGH - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)
ā ļø Indicators of Compromise
- Kit types: Credential Harvester, Personal Info
- 36 obfuscation techniques
š¢ Brand Impersonation Analysis
Impersonated Brand
Atletico Madrid
Fake Service
Sports Betting
Fraudulent Claims
āļø Attack Methodology
Primary Method: Credential Harvesting
The site will likely attempt to harvest user credentials through a login form or by tricking the user into providing personal information
Secondary Method: Malware distribution
The site might contain malicious scripts that are obfuscated to avoid detection, which can download malware to the user's computer.
š Infrastructure Indicators of Compromise
Domain Information
Domain
8836511.org
Registered
2024-03-12T01:05:19+00:00
Registrar
Unknown
Status
active
š¤ AI-Extracted Threat Intelligence
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
K8
https://685123.cc/
Jul 26, 2026
Unknown (Sports Betting, possibly related to Atletico Madrid)
https://7730302.com
Mar 17, 2026
K8 and Atletico de Madrid (Likely a Sport Betting site)
https://365k11.cc
Mar 17, 2026
K8 (Sports Betting)
https://3659008.vip
Mar 17, 2026
K8 and Atletico Madrid
https://3115kk.top
Mar 17, 2026
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.