🚀Create IOK: fauxmoralis-6a3cac21

Create fauxmoralis-6a3cac21.yml

indicators/fauxmoralis-6a3cac21.yml

@@ -0,0 +1,23 @@
+title: FauxMoralis Crypto Drainer 6a3cac21
+description: |
+    Sites that contact this domain are websites that will
+    drain a user's crypto wallet using a piece of javascript
+    code known as a 'crypto drainer'.
+
+    Due to this domain imitating the real Moralis API it 
+    has been named FauxMoralis to reflect this.
+    
+references:
+  - https://urlscan.io/result/6a3cac21-e6e5-40a7-984f-c9bcf023b2ed
+  - https://urlscan.io/search/#domain:"moralis-api.zip"
+
+detection:
+
+    drainerConfigurationDomain:
+      requests|contains: 'moralis-api.zip'
+
+    condition: drainerConfigurationDomain
+
+tags:
+  - kit
+  - cryptocurrency