Fake crypto mining - ReceiveVoucher3

IOK Rule (edit)

title: Fake crypto mining - ReceiveVoucher3

description: |
    Detects a malicious DApp that pretends to be a liquidity mining
    platform while presenting fake audit reports. Older version of 
    the fake-crypto-mining-noChrome rule.

references:
    - https://urlscan.io/result/3bf65041-f47e-4b4f-9b6b-997baa7ba1ce/
    - https://urlscan.io/result/ec5f8399-3560-4f6e-a3dd-e4efb87defef/
    - https://urlscan.io/result/02e3f645-638c-4004-b6b8-63274ba3677e/
    - https://urlscan.io/result/6479841b-b9e0-4346-8868-8467a6460ac6/
    - https://urlscan.io/result/7f1c19fe-6861-4742-865e-9caba6d72976/

related:
    - id: fake-crypto-mining-noChrome

detection:

    identifier:
      js|contains|all:
        - 'Receive Voucher'
        - 'lang_start_mining'
        - 'lang_pool'
        - 'lang_team'
        - 'lang_profit'
        - 'lang_sub_liquidity_ming'

    condition: identifier

tags:
  - cryptocurrency