SafeMode - Analysis: 025saibo.com

Visual Capture

Detection Info

http://025saibo.com

Detected Brand

K8凯发 & Atlético de Madrid

Country

International

Confidence

100%

HTTP Status

200

Report ID

fc3abd0a-71e…

Analyzed

2025-12-31 06:25

Final URL (after redirects)

http://025saibo.com/

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T16F31BF31C4C48CFF0656C7E8CA367B1BF2D68758D7036A05C5E947AE6649D66CC07885
CONTENT ssdeep	24:tCcH4/u4F0lC9HXHJbqvHXHJaVR62qZA6UR/2X926u6dT:lH6u4F0lIbsaVR6+cldT

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	8dad624a3c879d8d
VISUAL aHash	10183e1a18183800
VISUAL dHash	a1f2f23232f0f0cc
VISUAL wHash	187e3f3f187c7c00
VISUAL colorHash	39600008001
VISUAL cropResistant	8c96968eaaaa869e,a1f2f23232f0f0cc

Code Analysis

Risk Score 90/100

Threat Level ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: Brand impersonation/scam targeting users interested in Atletico Madrid and online gambling.
• Target: Users in Asia who may be interested in sports betting related to Atletico Madrid.
• Method: Impersonation through illegitimate website using logos and branding of both Atletico Madrid and the K8 gambling company to potentially promote scam gambling links or harvest user data if forms were present.
• Exfil: Likely redirection to malicious gambling site or data harvesting if forms existed.
• Indicators: Domain name does not match the branded content, recently created domain (74 days old), presence of gambling related content.
• Risk: HIGH - Brand impersonation and potential scam. Direct access to a scam gambling site is very risky.