Phishing Analysis: BlockFi

Captura Visual

Screenshot of homepege--blackfi--login--auth.webflow.io

Informações de Detecção

http://homepege--blackfi--login--auth.webflow.io/

Detected Brand

BlockFi

Country

USA

Confidence

95%

HTTP Status

200

Report ID

6186b658-e55…

Analyzed

2026-03-17 16:54

Final URL (after redirects)

https://homepege--blackfi--login--auth.webflow.io/

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T17D71A51BD1E8104D161702E57DB230ADC65681EFF3E6DD446CF0E20DB3E8A95227E955
CONTENT ssdeep	96:gCdhD6GP4Sxlw/r4R3V4R1t4R74RX4RW0EdxGu2XDMWeON1r:gCTDrP4SxlwT4RF4R1t4R74RX4Rod4zv

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	e46e93d9690b926c
VISUAL aHash	fb97b333f3f7ffff
VISUAL dHash	cb25674626c4dbb6
VISUAL wHash	39131333f373031f
VISUAL colorHash	07002000180
VISUAL cropResistant	cb25674626c4dbb6,7a5d5c6f66636d0c

Análise de Código

Risk Score 53/100

Threat Level ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester

🔬 Threat Analysis Report

• Ameaça: Phishing
• Alvo: Usuários do BlockFi
• Método: Personificação usando um site semelhante em hospedagem gratuita.
• Exfil: Provavelmente rouba credenciais de login e, possivelmente, informações financeiras.
• Indicadores: Hospedagem gratuita, logotipo da marca presente.
• Risco: ALTO

🔒 Obfuscation Detected

fromCharCode

📊 Detalhamento da Pontuação de Risco

Total Risk Score

90/100

Contributing Factors

Free Hosting

The site is hosted on a free platform (webflow.io), which is commonly abused by phishers.

Brand Impersonation

The site is attempting to look like the legitimate BlockFi website.

Obfuscation

Obfuscation detected in javascript code

🔬 Análise Integral de Ameaças

Tipo de Ameaça

Credential Harvesting Kit

Alvo

BlockFi users (USA)

Método de Ataque

Brand impersonation + credential harvesting forms + obfuscated JavaScript

Canal de Exfiltração

Form submission (backend endpoint not detected - likely JavaScript-based)

Avaliação de Risco

MEDIUM - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

Kit types: Credential Harvester
2 obfuscation techniques

🏢 Análise de Falsificação de Marca

Impersonated Brand

BlockFi

Official Website

https:

Fake Service

BlockFi Login

⚔️ Metodologia de Ataque

Primary Method: Credential Harvesting

The phishing site is designed to trick users into entering their BlockFi login credentials, which are then harvested by the attackers.

🌐 Indicadores de Compromisso de Infraestrutura

Domain Information

Domain

homepege--blackfi--login--auth.webflow.io

Registered

None

Registrar