FauxMoralis Crypto Drainer 6a3cac21

Sites that contact this domain are websites that will drain a user's crypto wallet using a piece of javascript code known as a 'crypto drainer'.

Due to this domain imitating the real Moralis API it has been named FauxMoralis to reflect this.

References

IOK Rule (edit) 

title: FauxMoralis Crypto Drainer 6a3cac21
description: |
    Sites that contact this domain are websites that will
    drain a user's crypto wallet using a piece of javascript
    code known as a 'crypto drainer'.

    Due to this domain imitating the real Moralis API it 
    has been named FauxMoralis to reflect this.
    
references:
  - https://urlscan.io/result/6a3cac21-e6e5-40a7-984f-c9bcf023b2ed
  - https://urlscan.io/search/#domain:"moralis-api.zip"
  
detection:

    drainerConfigurationDomain:
      requests|contains: 'moralis-api.zip'

    condition: drainerConfigurationDomain

tags:
  - kit
  - cryptocurrency