Phishing Analysis
Detailed analysis of captured phishing page
Captura Visual
Informações de Detecção
https://optimusaitrade.com/
Detected Brand
Optimus AI
Country
International
Confiança
100%
HTTP Status
200
Report ID
02d60dd1-256…
Analyzed
2026-08-12 11:18
Hashes de Conteúdo (Similaridade HTML)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1DF7242761040AE3B42D383D5B732632FF3C68288DA9B1B15A7F9C70D8AC2DA5DD1654A |
|
CONTENT
ssdeep
|
192:795jWLgzO0uZYjdoHksTGaCcL500IIogIk/lWlWzhpHuX8TLERVefYyc0pInpliv:aFIIonWzhMMTwfefYQpIp4NFHZ |
Hashes Visuais (Similaridade de Captura)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b809b2c7cce79c32 |
|
VISUAL
aHash
|
ff8f8bd19fdfe78f |
|
VISUAL
dHash
|
663836333c3a0e36 |
|
VISUAL
wHash
|
f307038181dfc78f |
|
VISUAL
colorHash
|
07400188000 |
|
VISUAL
cropResistant
|
663836333c3a0e36 |
Análise de Código
Risk Score
68/100
Nível de Ameaça
ALTO
⚠️ Phishing Confirmed
🎣 OTP Stealer
🎣 Banking
🔬 Threat Analysis Report
• Ameaça: Phishing de Criptomoedas
• Alvo: Investidores
• Método: Injeção de script malicioso
• Exfil: Desconhecido
• Indicadores: JS ofuscado
• Risco: Alto
🔒 Obfuscation Detected
- unescape
📡 API Calls Detected
- /api/sms-verification-status
- POST
- /api/sms/verify
- /api/sms/send
📊 Detalhamento da Pontuação de Risco
Total Risk Score
90/100
Contributing Factors
JavaScript Obfuscation
Use of unescape in malicious context
Financial Scam Indicators
Unrealistic investment promises
🔬 Análise Integral de Ameaças
Tipo de Ameaça
Banking Credential Harvester
Alvo
Optimus AI users (International)
Método de Ataque
Brand impersonation + obfuscated JavaScript
Canal de Exfiltração
Form submission (backend endpoint not detected - likely JavaScript-based)
Avaliação de Risco
HIGH - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)
⚠️ Indicators of Compromise
- Kit types: OTP Stealer, Banking
- 2 obfuscation techniques
🏢 Análise de Falsificação de Marca
Impersonated Brand
Optimus AI
Official Website
unknown
Fake Service
Automated Crypto Trading
Fraudulent Claims
⚔️ Metodologia de Ataque
Primary Method: Crypto Drainer
Prompts users to connect wallets or authorize transactions for 'automated trading' portfolios.
Secondary Method: Malicious JS Injection
Obfuscated code hides data exfiltration routines.
Target Blockchain
Ethereum
🌐 Indicadores de Compromisso de Infraestrutura
Domain Information
Domínio
optimusaitrade.com
Registered
2026-03-09
Registrar
unknown
Estado
active
🤖 AI-Extracted Threat Intelligence
"Nunca pensei que aconteceria comigo"
Isso dizem os 2,3 milhões de vítimas a cada ano. Não espere para ser uma estatística.