Phishing Analysis
Detailed analysis of captured phishing page
Captura Visual
Informações de Detecção
https://meme-event.fun/
Detected Brand
PUMP FUN
Country
International
Confiança
100%
HTTP Status
200
Report ID
53852f16-444…
Analyzed
2026-02-09 09:24
Hashes de Conteúdo (Similaridade HTML)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T12A2295F26580702F6157C3C99F266BBD73A651E7E6D6010157FCC789CA8BC82EE0B944 |
|
CONTENT
ssdeep
|
192:ZC6440FAAqRZ61bmpKRyp+40rAAqRZ64oGQls+ec:ok0IRZ61bm7P0eRZ63ls+x |
Hashes Visuais (Similaridade de Captura)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
d3938caca4939ea6 |
|
VISUAL
aHash
|
7e646c6c60181800 |
|
VISUAL
dHash
|
f4ccc9c9cc3270b2 |
|
VISUAL
wHash
|
ff7e7c6c04183c18 |
|
VISUAL
colorHash
|
31030000600 |
|
VISUAL
cropResistant
|
760c99f2c0808183,f4ccc9c9cc3270b2 |
Análise de Código
Risk Score
82/100
Nível de Ameaça
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Banking
🎣 Personal Info
🔬 Threat Analysis Report
• Ameaça: Golpe de criptomoeda
• Alvo: Entusiastas de criptomoedas
• Método: Oferta de airdrop e oferta por tempo limitado
• Exfil: Provavelmente detalhes da carteira
• Indicadores: Domínio recente, airdrop, limite de tempo.
• Risco: Alto
🎯 Kit Endpoints
- #blog
- https://meme-event.fun/api/submit
📡 API Calls Detected
- POST
- https://api.binance.com/api/v3/ticker/price?symbol=PUMPUSDT
📊 Detalhamento da Pontuação de Risco
Total Risk Score
90/100
Contributing Factors
Recent Domain
The domain is brand new (0 days old).
Airdrop Offering
Offering free tokens is a common tactic used in phishing campaigns and scams.
Call to action.
Claim Tokens button
🔬 Análise Integral de Ameaças
Tipo de Ameaça
Banking Credential Harvester
Alvo
PUMP FUN users (International)
Método de Ataque
Phishing webpage
Canal de Exfiltração
Form submission (backend endpoint not detected - likely JavaScript-based)
Avaliação de Risco
CRITICAL - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)
⚠️ Indicators of Compromise
- Kit types: Credential Harvester, OTP Stealer, Banking, Personal Info
🏢 Análise de Falsificação de Marca
Impersonated Brand
PUMP FUN
Fake Service
PUMP FUN Airdrop
Fraudulent Claims
⚔️ Metodologia de Ataque
Primary Method: Airdrop Scam
The site promotes a free airdrop of PUMP tokens. The goal is likely to get users to connect their wallets to a malicious site or smart contract, potentially draining their funds or obtaining sensitive information.
🌐 Indicadores de Compromisso de Infraestrutura
🦠 Malicious Files
Main File
_nuxt/assets/index.js
File Size
📊 Diagrama de Fluxo de Ataque
User fills <input name='wallet'> → submitForm() → fetch('https://meme-event.fun/api/submit') → exfiltration of wallet credentials
🔬 JavaScript Deep Analysis
Operator Language
English (1%)
Sophistication Level
Basic
Total Code Size
564,6 KB
🔗 API Endpoints Detected
Other
63
Helius RPC
1
Solana RPC
1
🔐 Obfuscation Detected
- : Heavy
🤖 AI-Extracted Threat Intelligence
📊 Attack Flow
User fills <input name='wallet'> → submitForm() → fetch('https://meme-event.fun/api/submit') → exfiltration of wallet credentials
🎯 Malicious Files Identified
Main Drainer
_nuxt/assets/index.jsFile Size
45KB
Malicious Functions
submitForm
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
"Nunca pensei que aconteceria comigo"
Isso dizem os 2,3 milhões de vítimas a cada ano. Não espere para ser uma estatística.