SafeMode - Analysis: 3115kk.top

Visual Capture

Detection Info

http://3115kk.top

Detected Brand

Country

International

Confidence

100%

HTTP Status

200

Report ID

f83e5b0e-3c2…

Analyzed

2025-12-31 06:19

Final URL (after redirects)

http://3115kk.top/

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T16C31BD31C4C48CFF0A56C7E8CA367B1BF2D6875CDB036A0585EA47AE664AD76CC07885
CONTENT ssdeep	24:tCcH4/u4F0lC9HXHJbqpHXHJaVE62qZA6UR/2X926u6dT:lH6u4F0lIbGaVE6+cldT

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	8dad624a3c879d0f
VISUAL aHash	10183e1a18183800
VISUAL dHash	a1f2f23232f0f0cc
VISUAL wHash	187e3f3f187c7c00
VISUAL colorHash	39600008001
VISUAL cropResistant	8c96868eaaaa869e,a1f2f23232f0f0cc

Code Analysis

Risk Score 90/100

Threat Level ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: Brand impersonation and potential gambling scam
• Target: Fans of Atletico Madrid in Asia and users of the K8 betting platform
• Method: Using the brand image to lure users to an unofficial and potentially harmful website.
• Exfil: Unknown, but could lead to credential theft, financial fraud or malware installation.
• Indicators: Domain does not match the legitimate brands, suspicious domain name, imagery of Atletico Madrid and K8.
• Risk: HIGH - potential for financial loss or credential theft due to brand impersonation and gambling incentives.