SafeMode - Analysis: m.izuoluo.com

Captura Visual

Informações de Detecção

http://m.izuoluo.com

Detected Brand

Unknown - Multiple gambling platforms

Country

International

Confiança

100%

HTTP Status

200

Report ID

e59f19ea-92a…

Analyzed

2026-03-17 02:02

Final URL (after redirects)

http://m.izuoluo.com/

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T13173545191BEA9B71363C2C07AB4AB5AF3C163C9CB421E41ABF087895FC6F45CC0A576
CONTENT ssdeep	1536:BFjbC+rFXRdFr7FJnXV6byFs4dbAdroXR/FtV7FSnXV6by5uE:7zauE

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	9e8663d961669969
VISUAL aHash	1c3e3e36183c0000
VISUAL dHash	f0e4e4e4b2f0ccf0
VISUAL wHash	7e7e7e7e3c3c0000
VISUAL colorHash	30206008000
VISUAL cropResistant	f0e4e4e4b2f0ccf0

Análise de Código

Risk Score 80/100

Nível de Ameaça ALTO

⚠️ Phishing Confirmed

🎣 OTP Stealer 🎣 Banking

🔬 Threat Analysis Report

• Ameaça: Phishing
• Alvo: Usuários interessados em jogos de azar
• Método: Falsificação e promoção
• Exfil: Não está claro, provavelmente através de sites fraudulentos.
• Indicadores: Domínio incompatível, falsificação de marca, conteúdo promocional
• Risco: Alto

🔐 Credential Harvesting Forms

🔒 Obfuscation Detected

eval
unescape
document.write
hex_escape
unicode_escape

📡 API Calls Detected

get

📤 Form Action Targets

/search.php

📊 Detalhamento da Pontuação de Risco

Total Risk Score

90/100

Contributing Factors

Mismatched domain and brands

The domain does not belong to any of the advertised brands.

Brand impersonation

The site uses the logos and names of legitimate gambling platforms to lure users.

Promotional content

Offers and incentives (bonuses) are commonly used in phishing campaigns to attract victims.

Obfuscated Javascript

Javascript Obfuscation detected - potential malicious behavior

🔬 Análise Integral de Ameaças

Tipo de Ameaça

Banking Credential Harvester

Alvo

Unknown - Multiple gambling platforms users (International)

Método de Ataque

Brand impersonation + credential harvesting forms + obfuscated JavaScript

Canal de Exfiltração

HTTP POST to backend

Avaliação de Risco

CRITICAL - Automated credential harvesting with HTTP POST to backend

⚠️ Indicators of Compromise

Kit types: OTP Stealer, Banking
39 obfuscation techniques

🏢 Análise de Falsificação de Marca

Impersonated Brand

Multiple Gambling platforms

Official Website

Unknown

Fake Service

Gambling platforms

Fraudulent Claims

⚔️ Metodologia de Ataque

Primary Method: Brand impersonation/Affiliate Marketing

The site uses the logos and names of various gambling platforms to make the user believe the site is legit. The goal is to get the user to click on the links, likely for affiliate marketing or redirecting to malicious websites.