Fake crypto mining - ReceiveVoucher

IOK Rule (edit)

title: Fake crypto mining - ReceiveVoucher

description: |
    Detects a malicious DApp that pretends to be a cloud mining platform
    while presenting fake audit reports.

references:
    - https://urlscan.io/result/3b876cbb-9b3f-43e1-aaea-7fdbdfa9bf89/
    - https://urlscan.io/result/47f06aec-35bb-495d-9cf8-df58178a68d1/
    - https://urlscan.io/result/5be3b536-a4bd-4f81-b9be-1980ef3f955b/
    - https://urlscan.io/result/d14625b5-d46a-44cb-afba-73072046626d/
    - https://urlscan.io/result/714ba508-69aa-48de-b1e3-e53b51cbff38/
    - https://urlscan.io/result/468f540d-4c14-4dca-ad8d-9ed9cca27e41/
    - https://urlscan.io/result/6e2ae131-8b6a-4668-9b13-0df040d677dc/
    - https://urlscan.io/result/7c66056f-fc6f-4e04-ac48-1160f8ac77c4/

detection:

    identifier:
      html|contains|all:
        - "Receive Voucher"
        - "You need to pay a miner's fee"
        - "audit report"
        - "Wallet amount"

    condition: identifier

tags:
  - cryptocurrency