EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Captura Visual

Screenshot of www.web3.pancake.run

Informações de Detecção

http://www.web3.pancake.run/
Detected Brand
PancakeSwap
Country
International
Confiança
100%
HTTP Status
200
Report ID
27207c79-0f9…
Analyzed
2026-01-12 13:23
Final URL (after redirects)
https://web3.pancake.run/

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T17DA3C8F582B075F94117AFD8DB32BEAA755B30BFEFA28784837947A16683D94D448C00
CONTENT ssdeep
1536:K/XfbX0K1lQLfUUO5lSlQLfUUQlQLfUUpJ4CFf5lsckyFm+9fmSzidB9b:o1IGSIQILF3iT

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
bcd2c74d381a4dc3
VISUAL aHash
fcffff8f8b91ffff
VISUAL dHash
b003303c3632c802
VISUAL wHash
7cffff828080e8e0
VISUAL colorHash
070000000d0
VISUAL cropResistant
b003303c3632c802

Análise de Código

Risk Score 100/100
Nível de Ameaça ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info
WebSocket C2 🔥 Firebase Backend

🔬 Threat Analysis Report

• Ameaça: Phishing do PancakeSwap direcionado a usuários de criptomoedas
• Alvo: Usuários da bolsa de criptomoedas PancakeSwap
• Método: Um site falso do PancakeSwap solicita aos usuários que conectem suas carteiras, roubando suas credenciais.
• Exfil: Potencialmente exfiltrando chaves privadas e outros dados confidenciais por meio do envio de formulários JavaScript e terminais Firebase.
• Indicadores: Nome de domínio suspeito, TLD incomum (.run), assinatura do kit de phishing angler, JavaScript ofuscado e URLs WebSocket.
• Risco: CRÍTICO - Alto risco de comprometimento da carteira de criptomoedas.

🔒 Obfuscation Detected

  • atob
  • eval
  • fromCharCode
  • unescape
  • hex_escape
  • unicode_escape
  • base64_strings

🎯 Kit Endpoints

  • solana_signAndSendTransaction
  • https://blog.pancakeswap.finance
  • solana:signAndSendTransaction
  • https://blog.pancakeswap.finance/

📡 API Calls Detected

  • stats
  • 0x3b3b57de
  • https://raw-api.pancakeswap.com/ondo/status
  • https://raw.githubusercontent.com/pancakeswap/airdrop-v3-users/master/forFE.json
  • https://aptos.pancakeswap.finance
  • https://proofs.pancakeswap.com/cms-config/routing-base-config.json
  • https://raw-api.pancakeswap.com/ondo/market-status
  • /api/auth/telegram-callback
  • POST
  • logs
  • /api/paymaster
  • https://solana.pancakeswap.finance
  • account
  • https://api.blocto.app/networks/evm
  • https://obj-cache.pancakeswap.com
  • https://www.google.com/ccm/geo
  • /api/home
  • GET
  • proxy
  • https://api-v3.raydium.io/main/auto-fee
  • /__cookies__
  • https://proofs.pancakeswap.com/cms-config/tokens-routing-config.json

☁️ Cloud Backend

  • Firebase: pancakeswap-prod-firebase.firebaseapp.com

Scan History for www.web3.pancake.run

Found 9 other scans for this domain

😰
"Nunca pensei que aconteceria comigo"
Isso dizem os 2,3 milhões de vítimas a cada ano. Não espere para ser uma estatística.