Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
Detection Info
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1D893B7B051125E7FA14B83B1A690EB5B71D87B5DDB43924993FE03A63BE9CC1DC22E10 |
|
CONTENT
ssdeep
|
1536:wMMvh32iYsrY1HQWAM7MMmtdQ1rvYfc4ms1NqSqumO0X7thonE9sUpEh0qzIRSi/:wMHgbqSqumO0X7thonE9sUpEh0qzIRSw |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
8d568d76213770ad |
|
VISUAL
aHash
|
063c180000001b1b |
|
VISUAL
dHash
|
cc71f0ccccc4b3b3 |
|
VISUAL
wHash
|
7e7e7e662400033f |
|
VISUAL
colorHash
|
38000000c00 |
|
VISUAL
cropResistant
|
0020ddcccc990400,cc71f0ccccc4b3b3 |
Code Analysis
🔐 Credential Harvesting Forms
🔒 Obfuscation Detected
- fromCharCode
- unescape
- unicode_escape
- base64_strings
🎯 Kit Endpoints
- https://barbados-exchange.cc/auth/login
- https://barbados-exchange.cc/feed/blog
📡 API Calls Detected
- POST
- get
- GET
📤 Form Action Targets
- https://barbados-exchange.cc/exchange/create
📊 Risk Score Breakdown
Contributing Factors
🔬 Comprehensive Threat Analysis
⚠️ Indicators of Compromise
- Kit types: Credential Harvester, OTP Stealer, Card Stealer, Banking, Personal Info
- 49 obfuscation techniques
🏢 Brand Impersonation Analysis
⚔️ Attack Methodology
Primary Method: Credential Harvesting
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Secondary Method: JavaScript Obfuscation
Malicious code is obfuscated using 49 techniques to evade detection by security scanners and make reverse engineering more difficult.
Drainer supports multiple blockchain networks and checks for high-value tokens on each chain before executing drain operations.
🌐 Infrastructure Indicators of Compromise
Domain Information
Hosting Information
🤖 AI-Extracted Threat Intelligence
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Scan History for barbados-exchange.cc
Found 1 other scan for this domain
