EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Visual Capture

Screenshot of humidifi-dex.net

Detection Info

https://humidifi-dex.net/
Detected Brand
HumidiFi
Country
International
Confidence
100%
HTTP Status
200
Report ID
af8675da-c16…
Analyzed
2026-08-04 11:48

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T14A0394B3E081AD370297E3E35631576B72D48249DE2756349BB8C3AD27C2C71AD7A702
CONTENT ssdeep
384:KwryLRe2DzIkljXOyi30yRSnxLmkkeJr3h/uVxSCA/A+lorQ/OM8lvv/9Rcw/Hr6:JrZ2zIkljXPC0yqMzFNHr+fSt2

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
cccb33643433c6ce
VISUAL aHash
003c3c1818181818
VISUAL dHash
9471613034303232
VISUAL wHash
7e3c3c3c3c3c183c
VISUAL colorHash
38190000000
VISUAL cropResistant
9471613034303232

Code Analysis

Risk Score 65/100
Threat Level ALTO
⚠️ Phishing Confirmed
🎣 OTP Stealer 🎣 Banking

🔬 Threat Analysis Report

• Threat: Crypto Phishing
• Target: HumidiFi DeFi users
• Method: Malicious wallet connection
• Exfil: Crypto assets
• Indicators: Very new domain, DeFi clone
• Risk: Critical

📊 Risk Score Breakdown

Total Risk Score
95/100

Contributing Factors

Recent Domain
Domain is only 12 days old.
Wallet Connection
Site forces connection to DeFi wallet.

🔬 Comprehensive Threat Analysis

Threat Type
Banking Credential Harvester
Target
HumidiFi users (International)
Attack Method
Brand impersonation
Exfiltration Channel
Form submission (backend endpoint not detected - likely JavaScript-based)
Risk Assessment
HIGH - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

  • Kit types: OTP Stealer, Banking

🏢 Brand Impersonation Analysis

Impersonated Brand
HumidiFi
Official Website
Unknown
Fake Service
DeFi Liquidity/Trading

Fraudulent Claims

⚔️ Attack Methodology

Primary Method: Wallet Drainer

Tricks the user into connecting a Web3 wallet and signing malicious transactions to transfer assets to the attacker.

Secondary Method: Brand Impersonation

Copies the UI of a legitimate DeFi protocol to establish trust.

Target Blockchain
Solana

🌐 Infrastructure Indicators of Compromise

Domain Information

Domain
humidifi-dex.net
Registered
2026-07-22
Registrar
Unknown
Status
active

🤖 AI-Extracted Threat Intelligence

😰
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.