SafeMode - Analysis: www.mercadolibre.com.ar

Visual Capture

No screenshot available

Detection Info

https://www.mercadolibre.com.ar/gz/account-verification?go=https%3A%2F%2Fwww.mercadolibre.com.ar%2Fauriculares-gamer-inalambricos-skullcandy-plyr-con-microfono%2Fup%2FMLAU3524575288%2F&tid=819b5832-e052-4b9a-aa9e-9ad99e84357e

Detected Brand

Mercado Libre

Country

Argentina

Confidence

100%

HTTP Status

200

Report ID

02d40649-a78…

Analyzed

2026-01-02 05:05

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T19AA140F23898183A27F386D9F0A2E75C70CA5199C441A409C2D517FE0BD5EE6DD8A32F
CONTENT ssdeep	96:gIV2z34AKpVi9db1GmcoGkGcGBavG6D6GEOG0K1GY4tVM1GYgvfE1TC+/Jr12C+8:9V2FK29V1GmVGkGcGOD6GEOGN1GY4tif

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	f326390cd986f326
VISUAL aHash	000000ffffffffff
VISUAL dHash	8c2849320c10041b
VISUAL wHash	000000fffcfce1ff
VISUAL colorHash	07e00000000
VISUAL cropResistant	8c2849320c10041b

Code Analysis

Risk Score 86/100

Threat Level BAJO

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: No apparent threat detected.
• Target: Mercado Libre users in Argentina.
• Method: Page presents options for new or existing users.
• Exfil: No data exfiltration detected.
• Indicators: No phishing indicators detected.
• Risk: LOW - Appears to be a legitimate page.

🔒 Obfuscation Detected

atob
base64_strings

🎯 Kit Endpoints

https://www.mercadolibre.com/jms/mla/lgz/login?platform_id=ml&go=https://www.mercadolibre.com.ar/auriculares-gamer-inalambricos-skullcandy-plyr-con-microfono/up/MLAU3524575288/&loginType=negative_traffic