SafeMode - Analysis: uniswap123.pages.dev

Captura Visual

Informações de Detecção

https://uniswap123.pages.dev/#/swap

Detected Brand

PaxSwap

Country

International

Confiança

100%

HTTP Status

200

Report ID

a551b5b5-6a0…

Analyzed

2026-03-19 05:26

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T105D112718A083A2E92335ED0EA7563AB62ABB37DF58F101095BD43F087C6F84C927585
CONTENT ssdeep	96:T+fmKjKp+36BDLQRk1ByG/I83mb2zW+L6Sk1aq6vSm1OofPez:SfmKjKwkDsRMZ/v3TLicq6hZfPK

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	b3b38c8c9999b926
VISUAL aHash	ff67e76e24180000
VISUAL dHash	62cc4cd84c100000
VISUAL wHash	ffe7e7ee66180000
VISUAL colorHash	07007000000
VISUAL cropResistant	62cc4cd84c100000

Análise de Código

Risk Score 100/100

Nível de Ameaça ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Ameaça: Phishing
• Alvo: Usuários de criptomoedas
• Método: Impersonificação da plataforma PaxSwap.
• Exfil: Desconhecido, provavelmente para roubar credenciais e drenar carteiras de criptomoedas.
• Indicadores: Hospedagem gratuita, presença do logotipo da marca.
• Risco: ALTO

🔒 Obfuscation Detected

atob
eval
fromCharCode
hex_escape
unicode_escape
base64_strings

📡 API Calls Detected

GET

📊 Detalhamento da Pontuação de Risco

Total Risk Score

95/100

Contributing Factors

Free Hosting

The site is hosted on a free hosting platform (pages.dev) which is commonly abused for phishing.

Brand Impersonation

The website mimics the UI of PaxSwap which is a known crypto platform.

Obfuscated Javascript

Obfuscation detected.

🔬 Análise Integral de Ameaças

Tipo de Ameaça

Banking Credential Harvester

Alvo

PaxSwap users (International)

Método de Ataque

Brand impersonation + obfuscated JavaScript

Canal de Exfiltração

Form submission (backend endpoint not detected - likely JavaScript-based)

Avaliação de Risco

CRITICAL - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

Kit types: Credential Harvester, OTP Stealer, Banking, Personal Info
900 obfuscation techniques

🏢 Análise de Falsificação de Marca

Impersonated Brand

PaxSwap

Fake Service

Token swapping on PaxSwap.

⚔️ Metodologia de Ataque

Primary Method: Deceptive site

The site impersonates PaxSwap's interface to trick users into connecting their wallets and entering their credentials. This could lead to account compromise and theft of crypto.