EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Captura Visual

Screenshot of 8282usdt.com

Información de Detección

https://8282usdt.com/
Detected Brand
Upbit (Impersonation)
Country
South Korea
Confianza
90%
HTTP Status
200
Report ID
7783d9ba-f6d…
Analyzed
2026-07-28 23:34

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T10582B9B070829772005383E1BA61BFAE92D1E24DE6570940DEFFC76A4EF9C45EC1A15B
CONTENT ssdeep
384:Wn47tNyBjjFxZDe8sWdCTA1wf8qd4LLQ7:c47tNyBjhu20MCf8omLs

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
9203ed12d26dc5ed
VISUAL aHash
0004000e0e0cffff
VISUAL dHash
f7fdd8dcdcfcef30
VISUAL wHash
070f000e0e0effff
VISUAL colorHash
02002000180
VISUAL cropResistant
ffefcfc7c7cf7fb6,fffb2d2c2c6df7ff,b86f67b8b0a888aa,ef0080324032321a,f6fddcdcdcdcfcfd,7fdf9fefcfcfaf5f

Análisis de Código

Risk Score 65/100
Nivel de Amenaza ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
WebSocket C2

🔬 Threat Analysis Report

• Amenaza: Fraude Financiero/Cripto
• Objetivo: Inversores coreanos
• Método: Suplantación de herramientas de intercambio
• Exfil: Credenciales/datos de transacciones
• Indicadores: Intercambiador OTC no oficial
• Riesgo: Alto

🎯 Kit Endpoints

  • /login.php

📡 API Calls Detected

  • /api/markets.php?t=

📊 Desglose de Puntuación de Riesgo

Total Risk Score
85/100

Contributing Factors

Impersonation
Uses Upbit market data to masquerade as an authorized exchange service.
Domain Reputation
Newish domain used for financial services.

🔬 Análisis Integral de Amenazas

Tipo de Amenaza
Credential Harvesting Kit
Objetivo
Upbit (Impersonation) users (South Korea)
Método de Ataque
Brand impersonation + real-time WebSocket exfiltration
Canal de Exfiltración
WebSocket (1 endpoints)
Evaluación de Riesgo
HIGH - Automated credential harvesting with WebSocket (1 endpoints)

⚠️ Indicators of Compromise

  • Kit types: Credential Harvester

🏢 Análisis de Suplantación de Marca

Impersonated Brand
Upbit
Official Website
https://upbit.com
Fake Service
Crypto Exchange/OTC

Fraudulent Claims

⚔️ Metodología de Ataque

Primary Method: Financial Impersonation

The site creates a false sense of security by integrating real-time market data from legitimate exchanges (Upbit), tricking users into believing it is a reliable OTC trading platform.

Secondary Method: Credential Harvesting

Users are required to register and login, allowing attackers to collect credentials.

Target Blockchain
Tether (USDT)

🌐 Indicadores de Compromiso de Infraestructura

Domain Information

Dominio
8282usdt.com
Registered
2026-05-13
Registrar
Unknown
Estado
Active

🤖 AI-Extracted Threat Intelligence

😰
"Nunca pensé que me pasaría a mí"
Esto dicen las 2.3 millones de víctimas cada año. No esperes a ser una estadística.