EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats
100 Risk Score

High Risk

Threat Level: ALTO • Impersonating: dYdX

⚠ Risk Factors

  • JavaScript obfuscation detected (6 patterns)
  • Credential harvesting indicators detected
  • OTP/2FA stealing indicators detected
  • Uses Firebase for backend data storage
  • WebSocket connection for real-time C2 communication

Visual Capture

Screenshot of trade.dydx.exchange

Detection Info

https://trade.dydx.exchange/signup/bonus
Detected Brand
dYdX
Country
International
Confidence
100%
HTTP Status
200
Report ID
91086969-4d1…
Analyzed
2026-01-09 22:33
Final URL (after redirects)
https://trade.dydx.exchange/portfolio

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T17CF22CF3529465D44703CBE8ED337A65A46B74FEEFC602D88299DAD0A7E0AE08C19C54
CONTENT ssdeep
768:Gua/HPHJdLUOgakXX3EnhRZvidOGMDyPM:8/JdJIURVidy

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
83baaa8d8dacaa9a
VISUAL aHash
fb24043a3e202000
VISUAL dHash
6349494250454011
VISUAL wHash
ffa4a43e3e323881
VISUAL colorHash
38006400000
VISUAL cropResistant
6349494250454011

Code Analysis

Risk Score 100/100
Threat Level ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Card Stealer 🎣 Banking 🎣 Personal Info
WebSocket C2 🔥 Firebase Backend

🔒 Obfuscation Detected

  • atob
  • fromCharCode
  • unescape
  • hex_escape
  • unicode_escape
  • base64_strings

☁️ Cloud Backend

  • Firebase: dydx-ce5e3.firebaseapp.com