SafeMode - Analysis: 58365000.cc

Captura Visual

Información de Detección

https://58365000.cc

Detected Brand

Unknown (Gaming/Gambling)

Country

International

Confianza

95%

HTTP Status

200

Report ID

43da77a5-1ac…

Analyzed

2026-03-17 03:28

Final URL (after redirects)

https://58365000.cc/

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1E421DBB0408120FB45819B808FB6F3B95794C2E9ED9316008EDEA3ED4DCEBA8CD03365
CONTENT ssdeep	24:haSbOsaDVwDYButxFEFuiHFkfo2F5Ps/xFEFuiHF42F5mywa:Hbdmy0CEge0l+EgeXAW

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	99996666668d9966
VISUAL aHash	183c3c3c00000000
VISUAL dHash	f3b3b2b2d7eff7df
VISUAL wHash	1c3c3c3d0b0f0f1f
VISUAL colorHash	003c0000000
VISUAL cropResistant	f3b3b2b2d7eff7df

Análisis de Código

Risk Score 12/100

Nivel de Amenaza MEDIO

⚠️ Phishing Confirmed

🔬 Threat Analysis Report

• Amenaza: Phishing
• Objetivo: Jugadores
• Método: Atraer a los usuarios con promociones
• Exfil: Potencialmente recopila credenciales/datos
• Indicadores: Edad del dominio, ofertas promocionales, idioma.
• Riesgo: Moderado

🔒 Obfuscation Detected

eval
unescape
hex_escape
unicode_escape

📡 API Calls Detected

POST

📊 Desglose de Puntuación de Riesgo

Total Risk Score

65/100

Contributing Factors

Suspicious Content

Offers promotions and links associated with gambling which is commonly used in phishing campaigns.

Domain Age

The domain is relatively new.

Obfuscation Detected

Obfuscation used to hide the code and make it hard for detection

🔬 Análisis Integral de Amenazas

Tipo de Amenaza

Unknown (Gaming/Gambling) Phishing Landing Page

Objetivo

Unknown (Gaming/Gambling) users (International)

Método de Ataque

obfuscated JavaScript

Canal de Exfiltración

Form submission (backend endpoint not detected - likely JavaScript-based)

Evaluación de Riesgo

LOW - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

36 obfuscation techniques

🏢 Análisis de Suplantación de Marca

Impersonated Brand

Unknown

Fake Service

Gambling

Fraudulent Claims

⚔️ Metodología de Ataque

Primary Method: Credential Harvesting

The site likely directs users to fake login pages or registration forms associated with gambling sites to steal usernames, passwords, and possibly other financial or personal information.