EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Visual Capture

Screenshot of wetestxresolve.pages.dev

Detection Info

https://wetestxresolve.pages.dev/
Detected Brand
Unknown
Country
International
Confidence
100%
HTTP Status
200
Report ID
c31744db-785…
Analyzed
2026-02-07 22:01

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T12A43D8B217491EFE10C783E0B722773673A863D9E56F820682F847255B8BD5ADC735A0
CONTENT ssdeep
384:arhb8fgbnziNBXELiy/Y+nPacLR8ImC4mGHXISBhq8t8DDOmQpvqYtZ:4lbnzsZELk+CuV63HX38umQpiQ

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
ce9634343696963e
VISUAL aHash
76383c3c30383000
VISUAL dHash
c4f06969e0e0e0e0
VISUAL wHash
7e78fc7c78783800
VISUAL colorHash
38001600040
VISUAL cropResistant
c4f06969e0e0e0e0

Code Analysis

Risk Score 79/100
Threat Level ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: Phishing
• Target: Cryptocurrency wallet users
• Method: User interaction to 'connect wallet'
• Exfil: Unknown, likely to steal credentials or redirect to a scam service.
• Indicators: Free hosting, crypto market data, connect wallet button
• Risk: HIGH

🔒 Obfuscation Detected

  • fromCharCode
  • unescape
  • unicode_escape

🎯 Kit Endpoints

  • https://tailwindcss.com/docs/content-configuration
  • https://tailwindcss.com/docs/using-with-preprocessors#nesting
  • https://tailwindcss.com/docs/installation
  • https://evilmartians.com/chronicles/postcss-8-plugin-migration`),m.env.LANG&&m.env.LANG.startsWith(
  • https://tailwindcss.com`}),...e.nodes])},container:(()=
  • https://mths.be/cssesc
  • https://files.coinmarketcap.com/static/widget/coinMarquee.js
  • https://3rdparty-apis.coinmarketcap.com/v1/cryptocurrency/widget
  • https://cdn.tailwindcss.com
  • https://tailwindcss.com/docs/content-configuration#pattern-recommendations
  • https://twitter.com/browserslist
  • https://s2.coinmarketcap.com/static/img/coins/32x32/
  • https://tailwindcss.com/docs/content-configuration#safelisting-classes
  • https://3rdparty-apis.coinmarketcap.com/v1/cryptocurrency/top
  • https://tailwindcss.com/docs/content-configuration#discarding-classes
  • https://tailwindcss.com/docs/upgrade-guide#remove-dark-mode-configuration
  • https://www.w3ctech.com/topic/2226`));let
  • https://coinmarketcap.com/currencies/
  • https://tailwindcss.com/docs/upgrade-guide#prefix-cannot-be-a-function
  • https://tailwindcss.com/docs/upgrade-guide#configure-content-sources
  • https://coinmarketcap.com/
  • https://tailwindcss.com/docs/upgrade-guide#replace-variants-with-layer

📊 Risk Score Breakdown

Total Risk Score
90/100

Contributing Factors

Free Hosting
The use of free hosting is a major red flag.
Targeting Crypto Wallets
Sites targeting cryptocurrency wallets are frequently used for phishing.

🔬 Comprehensive Threat Analysis

Threat Type
Banking Credential Harvester
Target
General public
Attack Method
obfuscated JavaScript
Exfiltration Channel
Unknown
Risk Assessment
HIGH - Automated credential harvesting with Unknown

⚠️ Indicators of Compromise

  • Kit types: Credential Harvester, OTP Stealer, Banking, Personal Info
  • 24 obfuscation techniques

🏢 Brand Impersonation Analysis

Impersonated Brand
Blockchain Wallets (Generic)
Fake Service
Wallet rectification service

Fraudulent Claims

⚔️ Attack Methodology

Primary Method: Credential Harvesting

The site likely attempts to steal login credentials or seed phrases via a 'Connect Wallet' button. This leads users to enter their sensitive information.

Secondary Method: Redirection to a Scam Service

If credential harvesting fails, the site may redirect to a scam service or malicious site.

🌐 Infrastructure Indicators of Compromise

🦠 Malicious Files

Main File
cdn.tailwindcss.com
File Size

🔬 JavaScript Deep Analysis

Operator Language
English (1%)
Total Code Size
455.3 KB

🔗 API Endpoints Detected

Other
10

🔐 Obfuscation Detected

  • : Moderate
  • : Moderate

🤖 AI-Extracted Threat Intelligence

🎯 Malicious Files Identified

Main Drainer
cdn.tailwindcss.com
File Size
455KB

Similar Websites

Pages with identical visual appearance (based on perceptual hash)

Screenshot
Unknown
http://koiitxtresolve.pages.dev/
Jun 02, 2026
 Screenshot
WalletConnect (implied)
http://brevistestresolve.pages.dev/
May 11, 2026
 Screenshot
Unknown
https://dusktestresolve.pages.dev/
Feb 18, 2026
No screenshot
Unknown
http://unitestresolve.pages.dev/
Feb 13, 2026
 Screenshot
Unknown
http://heliustestresolve.pages.dev/
Feb 11, 2026

Scan History for wetestxresolve.pages.dev

Found 1 other scan for this domain

😰
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.