Phishing Analysis
Detailed analysis of captured phishing page
Captura Visual
No screenshot available
Informações de Detecção
http://coinbaseru.ru
Detected Brand
Coinbase
Country
International
Confiança
100%
HTTP Status
200
Report ID
5f00a45d-cc1…
Analyzed
2025-12-21 11:37
Final URL (after redirects)
http://coinbaseru.ru/
Hashes de Conteúdo (Similaridade HTML)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1C9032E61829D649E0141F45ADD08FE0EB8EB44FE7FBB5B5711A82DBF31E2130C67A219 |
|
CONTENT
ssdeep
|
768:1ojtdIIPE9kOeFiYkGx47oHg/VDrRTgzosUllG:1ojtdIIPakOeIYkGx47oHg/VDrRTgksl |
Hashes Visuais (Similaridade de Captura)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
ed4d9a69c9693849 |
|
VISUAL
aHash
|
f9d3d3d3fbc3c3df |
|
VISUAL
dHash
|
2326262632161e3b |
|
VISUAL
wHash
|
91d383d3c3c3c3c3 |
|
VISUAL
colorHash
|
070010001c0 |
|
VISUAL
cropResistant
|
2326262632161e3b |
Análise de Código
Risk Score
70/100
Nível de Ameaça
ALTO
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Banking
🎣 Personal Info
🔬 Threat Analysis Report
• Threat: Phishing targeting Coinbase users
• Target: Coinbase users internationally, primarily in Russian-speaking regions
• Method: Fake Coinbase website using Russian domain, harvesting email addresses.
• Exfil: Likely email addresses submitted
• Indicators: Domain name mismatch (coinbaseru.ru vs coinbase.com), .ru domain, Russian language content, email address field.
• Risk: HIGH - Potential credential or financial data theft
🔐 Credential Harvesting Forms
🎯 Kit Endpoints
- https://www.coinbase.com/login
📤 Form Action Targets
- http://coinbaseru.ru/
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Scan History for coinbaseru.ru
Found 2 other scans for this domain
"Nunca pensei que aconteceria comigo"
Isso dizem os 2,3 milhões de vítimas a cada ano. Não espere para ser uma estatística.