Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
Detection Info
https://kaarden.net/
Detected Brand
Kaarden
Country
International
Confidence
95%
HTTP Status
200
Report ID
a23f2bb7-619…
Analyzed
2026-07-13 11:28
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1FFE29231A045BA3B61E392F5A770975EB396D206DB6B0A0027FC878C5FD3D85CC23299 |
|
CONTENT
ssdeep
|
768:L4FRjYiqdDFStCRTuX6hmAJVrg0WOX7YLN599ODZOXHAI/GkuEJdTCSiTLg7jMxa:L42hmA7rgdOrYLNxODZO3AYRLWSiWj7 |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
837c3cc3e4c6d338 |
|
VISUAL
aHash
|
66000c7c6e7e0103 |
|
VISUAL
dHash
|
d477e9c9c9c8fff7 |
|
VISUAL
wHash
|
67000c7d7f7f0307 |
|
VISUAL
colorHash
|
38000000780 |
|
VISUAL
cropResistant
|
bf7fbbacec9fffff,d477e9c9c9c8fff7 |
Code Analysis
Risk Score
50/100
Threat Level
ALTO
⚠️ Phishing Confirmed
🎣 Personal Info
🔬 Threat Analysis Report
• Threat: Crypto Investment Scam
• Target: Retail Investors
• Method: Fake Token Presale
• Exfil: Wallet Connection / Draining
• Indicators: High-pressure UI, countdown timer
• Risk: High
📊 Risk Score Breakdown
Total Risk Score
90/100
Contributing Factors
Domain Age
Site is less than 2 months old.
Content Type
Aggressive crypto presale scam indicators.
🔬 Comprehensive Threat Analysis
Threat Type
Phishing Kit (Personal Info)
Target
Kaarden users (International)
Attack Method
Brand impersonation
Exfiltration Channel
Form submission (backend endpoint not detected - likely JavaScript-based)
Risk Assessment
MEDIUM - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)
⚠️ Indicators of Compromise
- Kit types: Personal Info
🏢 Brand Impersonation Analysis
Impersonated Brand
Kaarden
Fake Service
Token Sale
Fraudulent Claims
⚔️ Attack Methodology
Primary Method: Wallet Drainer
The site prompts users to connect their Web3 wallets to 'purchase' tokens, which executes a malicious contract that drains funds.
Secondary Method: FOMO generation
Uses fake countdowns to force users into making hasty financial decisions.
Target Blockchain
Ethereum/EVM
🌐 Infrastructure Indicators of Compromise
Domain Information
Domain
kaarden.net
Registered
2026-05-15
Registrar
Unknown
Status
Active
🤖 AI-Extracted Threat Intelligence
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.