Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
Detection Info
https://777lucky8.com/
Detected Brand
Unknown
Country
Unknown
Confidence
90%
HTTP Status
200
Report ID
fd7b0fb3-63b…
Analyzed
2026-07-26 11:26
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1920210345485A6370193F2E2F7799B1F369182A2CF532B0646F4CB6D9FE7C6ACD22205 |
|
CONTENT
ssdeep
|
192:a9FlmWgXkcT593u2Qg6a/PkeBu+pKGCTwRrypKMYNVPWuW:a9FzKTD3u2vXvUuW |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
e613ec996c92ed90 |
|
VISUAL
aHash
|
b9000000fffffff7 |
|
VISUAL
dHash
|
6bcc4d6d08083427 |
|
VISUAL
wHash
|
a0000000fffffff3 |
|
VISUAL
colorHash
|
06000000e00 |
|
VISUAL
cropResistant
|
00636b4b6b630000,66e6f1b0a4345e1c,10080cc438372427,00c4c8cd6c698d01,55154d4c71f151b0 |
Code Analysis
Risk Score
6/100
Threat Level
MEDIO
⚠️ Phishing Confirmed
🔒 Obfuscation Detected
- fromCharCode
- base64_strings
🎯 Kit Endpoints
- img/logo.png?v=2
📡 API Calls Detected
- /download_stat
- GET
📊 Risk Score Breakdown
Total Risk Score
6/100
Contributing Factors
Code Obfuscation
JavaScript code obfuscated using 23 technique(s) to evade detection
🔬 Comprehensive Threat Analysis
Threat Type
Unknown Threat
Target
General public
Attack Method
obfuscated JavaScript
Exfiltration Channel
Unknown
Risk Assessment
LOW - Automated credential harvesting with Unknown
⚠️ Indicators of Compromise
- 23 obfuscation techniques
🏢 Brand Impersonation Analysis
Impersonated Brand
Generic Phishing
Official Website
N/A
Fake Service
Credential harvesting service
⚔️ Attack Methodology
Primary Method: Phishing Webpage
Generic phishing page with unclear attack methodology. May use social engineering, brand impersonation, or other tactics to deceive victims.
Secondary Method: JavaScript Obfuscation
Malicious code is obfuscated using 23 techniques to evade detection by security scanners and make reverse engineering more difficult.
🌐 Infrastructure Indicators of Compromise
Domain Information
Domain
777lucky8.com
Registered
2025-11-22 13:41:37+00:00
Registrar
Gname.com Pte. Ltd.
Status
Active (245 days old)
Hosting Information
Provider
Gname.com Pte. Ltd.
ASN
🤖 AI-Extracted Threat Intelligence
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Unknown
https://cdn.gosafemode.com/screenshots/9a3c679bbb3b.png
Jul 26, 2026
Unknown
https://cdn.gosafemode.com/screenshots/573056b5ed5a.png
Jul 26, 2026
777lucky7
https://777lucky7.vip/
Jul 26, 2026
Unknown
https://cdn.gosafemode.com/screenshots/a3434a3ebf0b.png
Jul 26, 2026
Unknown
https://cdn.gosafemode.com/screenshots/db45e891db19.png
Jul 26, 2026
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.