SafeMode - Analysis: atoremwallet.webflow.io

Captura Visual

Informações de Detecção

http://atoremwallet.webflow.io/

Detected Brand

Atomic Wallet

Country

International

Confiança

95%

HTTP Status

200

Report ID

1ca57028-bb9…

Analyzed

2026-03-17 16:58

Final URL (after redirects)

https://atoremwallet.webflow.io/

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T19231EC2BE214494D0613B3FEEB8330FDC7CB854EC6C36BB121E4904E53EA99541F6A86
CONTENT ssdeep	48:oR3RQ2RpAm0yPPRLPRN2+u/YPRgAYHPRotPRQPRC2K:Mh22PpLpN2/ApgtpotpQpy

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	a92bde1a28d21b2f
VISUAL aHash	01030303033fffff
VISUAL dHash	ebc7cf8f877b0023
VISUAL wHash	01030343033fffff
VISUAL colorHash	03001000180
VISUAL cropResistant	ebc7cf8f877b0023,6da6a6bf24989c56,54542bb625225e1e,ccc4809e8e80c4d4,b6e3c3c7c3c7c3fa

Análise de Código

Risk Score 53/100

Nível de Ameaça ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester

🔬 Threat Analysis Report

• Ameaça: Phishing
• Alvo: Usuários da Atomic Wallet
• Método: Imitação por meio de um site semelhante.
• Exfil: Desconhecido, provavelmente coleta de credenciais de login.
• Indicadores: Hospedagem gratuita, logotipo da marca, conteúdo de uma marca legítima.
• Risco: ALTO

🔒 Obfuscation Detected

fromCharCode

📊 Detalhamento da Pontuação de Risco

Total Risk Score

90/100

Contributing Factors

Free Hosting

Using webflow.io is a common indicator of phishing.

Brand Impersonation

The site directly mimics the Atomic Wallet brand and interface.

Obfuscation

Javascript obfuscation to hide malicious code

Content Mimicry

The site is replicating content

🔬 Análise Integral de Ameaças

Tipo de Ameaça

Credential Harvesting Kit

Alvo

Atomic Wallet users (International)

Método de Ataque

Brand impersonation + credential harvesting forms + obfuscated JavaScript

Canal de Exfiltração

Form submission (backend endpoint not detected - likely JavaScript-based)

Avaliação de Risco

MEDIUM - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

Kit types: Credential Harvester
2 obfuscation techniques

🏢 Análise de Falsificação de Marca

Impersonated Brand

Atomic Wallet

Official Website

atomicwallet.io

Fake Service

Atomic Wallet

⚔️ Metodologia de Ataque

Primary Method: Credential Harvesting

The attacker likely aims to steal user credentials by creating a fake login form or tricking users into downloading a malicious app that steals their keys.