EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Captura Visual

Screenshot of 8282usdt.com

Informações de Detecção

https://8282usdt.com/
Detected Brand
Upbit (Impersonation)
Country
South Korea
Confiança
90%
HTTP Status
200
Report ID
7783d9ba-f6d…
Analyzed
2026-07-28 23:34

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T10582B9B070829772005383E1BA61BFAE92D1E24DE6570940DEFFC76A4EF9C45EC1A15B
CONTENT ssdeep
384:Wn47tNyBjjFxZDe8sWdCTA1wf8qd4LLQ7:c47tNyBjhu20MCf8omLs

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
9203ed12d26dc5ed
VISUAL aHash
0004000e0e0cffff
VISUAL dHash
f7fdd8dcdcfcef30
VISUAL wHash
070f000e0e0effff
VISUAL colorHash
02002000180
VISUAL cropResistant
ffefcfc7c7cf7fb6,fffb2d2c2c6df7ff,b86f67b8b0a888aa,ef0080324032321a,f6fddcdcdcdcfcfd,7fdf9fefcfcfaf5f

Análise de Código

Risk Score 65/100
Nível de Ameaça ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
WebSocket C2

🔬 Threat Analysis Report

• Ameaça: Fraude Financeira/Cripto
• Alvo: Investidores coreanos
• Método: Impersonação de ferramentas de câmbio
• Exfil: Credenciais/dados de transações
• Indicadores: Wrapper de câmbio não oficial
• Risco: Alto

🎯 Kit Endpoints

  • /login.php

📡 API Calls Detected

  • /api/markets.php?t=

📊 Detalhamento da Pontuação de Risco

Total Risk Score
85/100

Contributing Factors

Impersonation
Uses Upbit market data to masquerade as an authorized exchange service.
Domain Reputation
Newish domain used for financial services.

🔬 Análise Integral de Ameaças

Tipo de Ameaça
Credential Harvesting Kit
Alvo
Upbit (Impersonation) users (South Korea)
Método de Ataque
Brand impersonation + real-time WebSocket exfiltration
Canal de Exfiltração
WebSocket (1 endpoints)
Avaliação de Risco
HIGH - Automated credential harvesting with WebSocket (1 endpoints)

⚠️ Indicators of Compromise

  • Kit types: Credential Harvester

🏢 Análise de Falsificação de Marca

Impersonated Brand
Upbit
Official Website
https://upbit.com
Fake Service
Crypto Exchange/OTC

Fraudulent Claims

⚔️ Metodologia de Ataque

Primary Method: Financial Impersonation

The site creates a false sense of security by integrating real-time market data from legitimate exchanges (Upbit), tricking users into believing it is a reliable OTC trading platform.

Secondary Method: Credential Harvesting

Users are required to register and login, allowing attackers to collect credentials.

Target Blockchain
Tether (USDT)

🌐 Indicadores de Compromisso de Infraestrutura

Domain Information

Domínio
8282usdt.com
Registered
2026-05-13
Registrar
Unknown
Estado
Active

🤖 AI-Extracted Threat Intelligence

😰
"Nunca pensei que aconteceria comigo"
Isso dizem os 2,3 milhões de vítimas a cada ano. Não espere para ser uma estatística.