SafeMode - Analysis: poolstrade.com

Visual Capture

Detection Info

https://poolstrade.com/

Detected Brand

Uniswap

Country

Unknown

Confidence

100%

HTTP Status

200

Report ID

86b68721-5ca…

Analyzed

2026-08-27 23:46

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T140A4712052730176013BD2C2B5FFAF6990EA6279F9D39668D3AC836D06CEC667E4444F
CONTENT ssdeep	3072:9TzSCmNqLYVrXLLk84q4sRvWo3ikcOgnGuWwtt8ItV4dvMaLzeL6KUdcT8:9dtx8

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	932436c9c936ce9b
VISUAL aHash	000234007c3c043c
VISUAL dHash	46c4edd0d8d8ecc8
VISUAL wHash	00227e487c7e3e7e
VISUAL colorHash	30000180001
VISUAL cropResistant	6565b928683c3978,46c4edd0d8d8ecc8

Code Analysis

Risk Score 100/100

Threat Level ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

WebSocket C2

🔒 Obfuscation Detected

atob
fromCharCode
unescape
hex_escape
base64_strings

🎯 Kit Endpoints

https://gateway.pinata.cloud/ipfs/bafkreihoan53i3v25ifztrxcxwm6qih2nz3va5j5baiz6lruiwjtewgxha
https://gateway.pinata.cloud/ipfs/bafkreibujhxlfu4kp46sjsxqa2wobkmeffyzilfgx4nzvqeebhqynhcziy
https://gateway.pinata.cloud/ipfs/bafkreidbpkjtd2bx33zu2v23dbaksonub57s4h5kylwinrpgfy6xwk23v4
https://gateway.pinata.cloud/ipfs/bafkreifo55srgpj75oyphjqcztdv64pameyyhr7twlklb2mk5ecb55va5a
https://gateway.pinata.cloud/ipfs/bafkreideooiskhpczbidphqpsgcyxe7brmegd2mpg37zsu4odna3aybw74
https://gateway.pinata.cloud/ipfs/bafkreibrrt2aavrrwq36zai6u2ebzmj5ty5md7fui3i5kayl7rmr252rsq
https://gateway.pinata.cloud/ipfs/bafkreihj5khpf3ncrik2z6lbendrzrbx4bju3hthm44f2nvb3lysu2keyy
https://gateway.pinata.cloud/ipfs/bafkreicyjpvblxvvq5mt6wuduyeankjvajkfuqllcrpk52rydrqfx4vqo4
https://gateway.pinata.cloud/ipfs/bafkreiedflnelyeajrkq3a5cqktjuwtzolgqpjqxn37lzssgxojxmahxki
https://gateway.pinata.cloud/ipfs/bafkreidtdg3owt5fk63w6rgioe4b6fyud4enl4lvixgaxcwmqh7buqwewq
https://gateway.pinata.cloud/ipfs/bafybeifofjt77ychuq36aynoifq5wu46rfz6hlakatynb2fbiagn6lfdbi
https://gateway.pinata.cloud/ipfs/bafybeib5jpudb2ygdusguuif4grmbvhki7fpm6bomunm7ewlpx73bukko4
https://gateway.pinata.cloud/ipfs/bafkreid6dt7c5ywh3z2qsdqhltqi6bzezw6z7hcd7ehdbiql3kxaz67gqu
https://gateway.pinata.cloud/ipfs/bafkreiauoyjkaovwioz4tehf4qofcz45qi2xefifp4j3umeowqzlnvhaw4
https://gateway.pinata.cloud/ipfs/bafybeifkzs6jwwfravqmsdkipne5neqogv37hxysmwvio3rckmkreck6ni
https://gateway.pinata.cloud/ipfs/bafkreidokvcrbg3i2ducg4ycizrfem326cwr2aw62ufy72o32tsfcoxruu
https://gateway.pinata.cloud/ipfs/bafkreiebbkhsjs3vnp5ozfkcajwdy2nwauujfqbeymn7ymjhgx7giqixza
https://gateway.pinata.cloud/ipfs/bafkreifr5yebnmefcyer5l2qol3snhbdhmrfj2u74ztl2emkyx4jlf56la
https://gateway.pinata.cloud/ipfs/bafkreig4zgrykafytl5jnebmgmq6ovd3xftf254tpqb2bomwlsn5g5lw6u
https://gateway.pinata.cloud/ipfs/bafkreiekwhr2ukdfl5ibequ6kfjffztomhz5edsagfdcbvqdq4xpqenb5y
https://gateway.pinata.cloud/ipfs/bafybeicx4brdbsb6xlqxr5hoitujt27fdk2rm76br7ykvhiahum5fwaaiy
https://gateway.pinata.cloud/ipfs/QmRxAffzxBaR6DMKxfaHxvh6mNvsRdiUx6yMVfAGKirSNk
https://gateway.pinata.cloud/ipfs/bafkreif5rqjfyet26gcthilpufk5gwbkvbwjyvybomepujhvo3ajua6x4m
https://gateway.pinata.cloud/ipfs/bafkreifdcecxpjlmjk3lvghovcp6xvwvwxaprhi4kb5v3vpsvuyzhel5te
https://gateway.pinata.cloud/ipfs/bafkreidbbrlyhp4zcl3xooezwvgkfnwqanhp5tvichkmtol3c3dpq2kbra
https://gateway.pinata.cloud/ipfs/bafkreigvzzpsa7oj6hgvmtr2dt4ynjw5i2pwnmmefhns4thsihodmbbob4
https://gateway.pinata.cloud/ipfs/bafkreialeb3jj3tigjawci54ckwruzy2zbpq7hn57yahpq4lu2c4gkbmzq
https://gateway.pinata.cloud/ipfs/bafkreigjca7mj4hpelkennawzujrd5wd3qs6u4gi4bklqpj56paeyb46ui
https://gateway.pinata.cloud/ipfs/bafkreiaxuhz3zgn5mf5fhkpxd6nzn54oqcytiumbuyh4ccz5gli2a6igyy
https://gateway.pinata.cloud/ipfs/bafkreifoqvyt3akvpehintgl2em6ihz3xtkhvszmntk747hxtfljf64vzy
https://gateway.pinata.cloud/ipfs/bafkreidgwldtersrvexw2iyfrpctz42ukpwogiubtsbx2ggb6ktv6v2l6u
https://gateway.pinata.cloud/ipfs/bafkreifu7jlr36hfqtwticgohjiqyotwbnvdivdualyumehbzvu5vktwza
https://gateway.pinata.cloud/ipfs/bafkreihvsnnjmokkzmugcms2ikwdxxzajxygelaia6xkt3ghtwdgwopc5i
https://gateway.pinata.cloud/ipfs/bafkreigzzweosgxb3x5upcgxpj6ffl5dtnb7iwik3m5okm6o22g5r4gjnq
https://gateway.pinata.cloud/ipfs/bafkreifzxjg54fdgdkihruvpeqe5u22mmr4yvm476lvakyacgbdnmloi6q
https://gateway.pinata.cloud/ipfs/bafkreiba77l3fy74rp72bsgw6du6wn2m75stnpw3j22lz6tpby2mbl5ikq
https://gateway.pinata.cloud/ipfs/bafkreiawqmaqedt4kguro63bucvswawbtvwtkefs5alqfw5w2lz7vgm4ae
https://gateway.pinata.cloud/ipfs/bafkreifhse7yt6jkkgfxkzff7b3tznj5l35dspfphxi3bcx6km5zqckfvq
https://gateway.pinata.cloud/ipfs/bafkreigi3w63hc327xnj5eohnhhzrr6jem3hffp6vhgazleeonwqgtuifm
https://gateway.pinata.cloud/ipfs/bafkreiftxr5loekeo7s2rgjjdfjehhzdcu4i4xivrbwgasf2q7prtkeuvy
https://gateway.pinata.cloud/ipfs/bafkreichj56sfcnfkd45eucx22dcacvbai2ew457a7atqynfhzfeetsc3i
https://gateway.pinata.cloud/ipfs/bafybeihou6yhx4yyd76q4pgrpxbyx34pv3ok2ajwewccv6df45fzqyrh7i
https://gateway.pinata.cloud/ipfs/bafybeigunhsoribj6qzkbjeztlk5xhfdvtrxewsbdusu4j6w5sybk24rsm
https://gateway.pinata.cloud/ipfs/bafkreiekk5cpetdap7ap7dvzveveglr5oqeahx6cluu6r3nmpil3jd7yny
https://gateway.pinata.cloud/ipfs/bafybeif2w3o2fyv2xpfe7karkg6dcvtiidmohpn4t3acq2kz7kjkb7gr5m
https://gateway.pinata.cloud/ipfs/bafkreid7xhoezsxfsjpukmy5sopwv5nxiztpddovofhmnsamkbbwpwof7u
https://gateway.pinata.cloud/ipfs/bafkreias66gfa2p6v6cbsq3k6rwj62tj5w42pfwd52kch6avz3e2paqkiu

📊 Risk Score Breakdown

Total Risk Score

100/100

Contributing Factors

Active Phishing Kit

Detected kit types: Credential Harvester, OTP Stealer, Card Stealer, Banking, Personal Info

Credential Harvesting

Credential harvesting detected with 3 form(s) capturing sensitive data

Real-time C2

WebSocket-based Command & Control infrastructure for real-time victim monitoring

Code Obfuscation

JavaScript code obfuscated using 139 technique(s) to evade detection

🔬 Comprehensive Threat Analysis

Threat Type

Banking Credential Harvester

Target

Uniswap users

Attack Method

credential harvesting forms + real-time WebSocket exfiltration + obfuscated JavaScript

Exfiltration Channel

WebSocket (8 endpoints)

Risk Assessment

CRITICAL - Automated credential harvesting with WebSocket (8 endpoints)

⚠️ Indicators of Compromise

Kit types: Credential Harvester, OTP Stealer, Card Stealer, Banking, Personal Info
139 obfuscation techniques

🏢 Brand Impersonation Analysis

Impersonated Brand

Uniswap

Official Website

N/A

Fake Service

Banking/payment service

⚔️ Attack Methodology

Primary Method: Credential Harvesting

Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.

Secondary Method: JavaScript Obfuscation

Malicious code is obfuscated using 139 techniques to evade detection by security scanners and make reverse engineering more difficult.

Target Blockchain

Multiple blockchains

Whitelist Bypass

YES

Drainer supports multiple blockchain networks and checks for high-value tokens on each chain before executing drain operations.

🌐 Infrastructure Indicators of Compromise

Domain Information

Domain

poolstrade.com

Registered

2026-07-31 01:07:50+00:00

Registrar

NameSilo, LLC

Status

Recently registered (28 days old)

Hosting Information

Provider