🚀 opensea-389-9bec97c22fa2e411.yml

phish-report · Mar 10, 2024 · 8a872db · 8a872db
1 parent 324cdb8
commit 8a872db
Showing 1 changed file with 18 additions and 0 deletions.
diff --git a/indicators/opensea-389-9bec97c22fa2e411.yml b/indicators/opensea-389-9bec97c22fa2e411.yml
@@ -0,0 +1,18 @@
+title: OpenSea Phishing 389-9bec97c22fa2e411
+description: Detects OpenSea wallet drainers - mystery box scam. Often hosted on Vercel (https://vercel.com/).
+
+references:
+    - https://urlscan.io/result/03383a08-4618-4a92-9bff-99bd8b2be9f2/
+    - https://urlscan.io/result/672f40d7-78fb-4b28-8ef5-9f09591e20ea/
+    - https://urlscan.io/result/c6ed3c5a-e79a-491b-b316-deedc0527c49/
+
+detection:
+  File:
+    # This GIF file is used on a lot of OpenSea scams.
+    html|contains: '/389-9bec97c22fa2e411.gif'
+
+  condition: File
+
+tags:
+    - target.opensea
+    - cryptocurrency