EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Captura Visual

Screenshot of aigentrun.com

Informações de Detecção

https://aigentrun.com/
Detected Brand
Unknown
Country
International
Confiança
100%
HTTP Status
200
Report ID
89a8d256-78a…
Analyzed
2026-06-28 23:21

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T14583E73152502A3F65478FE4F7A4B36D21ABD39ED9078624E7BC13721BC6CE2ED26184
CONTENT ssdeep
1536:901udIxLsD4AzgbCdkgcppKIj/7SAZHA8axY0maCLV:iuWxSIFNkq

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
8f98d3667332c698
VISUAL aHash
fe3e3e1c00302020
VISUAL dHash
70f0f07060616969
VISUAL wHash
ff7f3e3c00303434
VISUAL colorHash
30002e00000
VISUAL cropResistant
70f0f07060616969

Análise de Código

Risk Score 100/100
Nível de Ameaça ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Ameaça: Drenador de carteira cripto
• Alvo: Usuários de criptomoedas
• Método: Reivindicação falsa de airdrop de tokens
• Exfil: Conexão de carteira Web3
• Indicadores: Domínio muito recente, alegações financeiras de alta pressão
• Risco: Crítico/Perda total de ativos

🔐 Credential Harvesting Forms

🔒 Obfuscation Detected

  • unescape

📡 API Calls Detected

  • GET
  • POST

📤 Form Action Targets

  • /search

📊 Detalhamento da Pontuação de Risco

Total Risk Score
95/100

Contributing Factors

Domain Age
Domain is only 6 days old.
Content/Template
Known crypto-drainer distribution template.
Technical
Detected obfuscated JS and external form submission to unknown endpoint.

🔬 Análise Integral de Ameaças

Tipo de Ameaça
Banking Credential Harvester
Alvo
General public
Método de Ataque
Brand impersonation + credential harvesting forms + obfuscated JavaScript
Canal de Exfiltração
HTTP POST to backend
Avaliação de Risco
CRITICAL - Automated credential harvesting with HTTP POST to backend

⚠️ Indicators of Compromise

  • Kit types: Credential Harvester, OTP Stealer, Card Stealer, Banking, Personal Info
  • 2 obfuscation techniques

🏢 Análise de Falsificação de Marca

Impersonated Brand
aigent.run
Fake Service
Crypto Airdrop Distribution

Fraudulent Claims

⚔️ Metodologia de Ataque

Primary Method: Wallet Draining

The site prompts users to connect their Web3 wallet under the guise of an airdrop, followed by malicious transaction signatures to empty funds.

Secondary Method: Social Engineering

Use of urgent, official-sounding 'eligibility' language to bypass user skepticism.

Target Blockchain
Ethereum

🌐 Indicadores de Compromisso de Infraestrutura

Domain Information

Domínio
aigentrun.com
Registered
2025-06-22
Registrar
Unknown
Estado
active

🤖 AI-Extracted Threat Intelligence

😰
"Nunca pensei que aconteceria comigo"
Isso dizem os 2,3 milhões de vítimas a cada ano. Não espere para ser uma estatística.