Elon Musk fake crypto giveaway xfve5qjx

Detects a scam giveaway landing page which claims to host a large cryptocurrency event. It asks you to send coins to a wallet to have them doubled.

References

IOK Rule (edit) 

title: Elon Musk fake crypto giveaway xfve5qjx
description: |
    Detects a scam giveaway landing page which claims to host a large cryptocurrency event.
    It asks you to send coins to a wallet to have them doubled.

references:
    - https://urlscan.io/result/1173f4d7-ba6b-456d-8bfc-9a6ce1daf2d2/
    - https://urlscan.io/result/302df41e-6ea1-40a4-b603-19cb6fd3b5f1/
    - https://urlscan.io/result/a9f8ae2b-9bc7-4ded-8ab4-6563b6df9355/

detection:

    favicon:
      html|contains:
        - link rel="icon" type="image/png" href="images/fav.png"

    title:
      html|contains:
        - <title>Tesla Event</title>

    cssBitcoin:
      html|contains:
        - link rel="stylesheet" href="css/btcc264c264.css?5jbgU7S9sn2eqCRm"

    cssEthereum:
      html|contains:
        - link rel="stylesheet" href="css/eth15251525.css?sZx4TqFlhdU7V1uK"

    cssDoge:
      html|contains:
        - link rel="stylesheet" href="css/doge7c1c7c1c.css?b10doqNv68PxRDhy"

    creator:
      html|contains:
        - <img src="img/png/creator

    condition: favicon and title and (cssBitcoin or cssEthereum or cssDoge) and creator

tags:
  - cryptocurrency
  - cryptocurrency.bitcoin
  - cryptocurrency.ethereum
  - cryptocurrency.doge