Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
Detection Info
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T18E33F9F993A8E6F5E501D3E8DB214575736B11FAAE82C720C3F8DF9C69A584DCC58880 |
|
CONTENT
ssdeep
|
768:BhXTRlXND9bVOvuOdIP3hyCBE8hXTRlXND9bVN:7RFVUuO2P3bRFVN |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
bb26c4d9d9c092d6 |
|
VISUAL
aHash
|
ff0101090d0dffff |
|
VISUAL
dHash
|
b60f8d5b5919d8f8 |
|
VISUAL
wHash
|
ff0101010d0cffff |
|
VISUAL
colorHash
|
132000c0002 |
|
VISUAL
cropResistant
|
02b5a106a6061717,172d9b5b191980d9,170f2d1b5b591919 |
Code Analysis
🔬 Threat Analysis Report
• Threat: Phishing
• Target: OpenSea Pro users
• Method: Impersonation using free hosting.
• Exfil: Potentially any data entered, leading to crypto theft.
• Indicators: Free hosting, brand logo.
• Risk: Critical
🔒 Obfuscation Detected
- eval
- fromCharCode
- unicode_escape
📊 Risk Score Breakdown
Contributing Factors
🔬 Comprehensive Threat Analysis
⚠️ Indicators of Compromise
- Kit types: Credential Harvester, OTP Stealer, Banking, Personal Info
- 5554 obfuscation techniques
🏢 Brand Impersonation Analysis
Fraudulent Claims
⚔️ Attack Methodology
Primary Method: Credential Harvesting / Wallet Drain
The attacker likely aims to trick users into connecting their cryptocurrency wallets to a malicious website. Once connected, the attacker can potentially steal the contents of the wallet, or redirect assets to the attacker’s account or compromise the user’s credentials.
Secondary Method: Social Engineering
The attacker uses a combination of visual cues to mirror the appearance of OpenSea Pro, and may use deceptive language, promising rewards or urgent actions, to manipulate users into taking actions that benefit the attacker.
🌐 Infrastructure Indicators of Compromise
Domain Information
🤖 AI-Extracted Threat Intelligence
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Scan History for mint-nftboxx-six-xi.vercel.app
Found 1 other scan for this domain
