SafeMode - Analysis: cloudhost-75870.us-west-1.nxcli.net

EN ES PT

Back to Stats

Captura Visual

No screenshot available

Informações de Detecção

http://cloudhost-75870.us-west-1.nxcli.net/roundcube?_task=mail&amp

Detected Brand

Unknown

Country

Unknown

Confiança

100%

HTTP Status

200

Report ID

71481b9a-6bc…

Analyzed

2026-01-01 21:15

Final URL (after redirects)

https://cloudhost-75870.us-west-1.nxcli.net:2443/roundcube/?_task=mail&amp

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T17551A61150341D3752F289F9D6CAF79254EE826CCF207C2938FC85AE07EAE1881B57E5
CONTENT ssdeep	48:mGkDJ5meKsgDfwJD/TlNjgvSUkZl8iVBm5gs1aOa44y:wU+7nEv4qj

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	b333cccccc723199
VISUAL aHash	ffe7e7e7ffffffff
VISUAL dHash	00080c0c00080000
VISUAL wHash	ffe7e7e700000000
VISUAL colorHash	070000001c0
VISUAL cropResistant	00080c0c00080000

Análise de Código

Risk Score 95/100

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Personal Info

🔐 Credential Harvesting Forms

🔒 Obfuscation Detected

atob
eval
fromCharCode
unescape
document.write
base64_strings

🎯 Kit Endpoints

./?_task=login
sendmdn

📤 Form Action Targets

./?_task=login

Similar Websites

Pages with identical visual appearance (based on perceptual hash)

Screenshot

https://cdn.gosafemode.com/screenshots/ce87ecc2f243.png

Screenshot

https://cdn.gosafemode.com/screenshots/4a47e464e9ed.png

Screenshot

https://cdn.gosafemode.com/screenshots/0315ee3a8e53.png

Screenshot

https://cdn.gosafemode.com/screenshots/e6b85ecffcae.png

https://s7.dih.pl/roundcube

Scan History for cloudhost-75870.us-west-1.nxcli.net

Found 1 other scan for this domain

http://cloudhost-75870.us-west-1.nxcli.net/roundcu... ? Dez 29, 2025 20:11

😰

"Nunca pensei que aconteceria comigo"

Isso dizem os 2,3 milhões de vítimas a cada ano. Não espere para ser uma estatística.