EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Visual Capture

Screenshot of pureprofitpoint.app

Detection Info

https://pureprofitpoint.app/
Detected Brand
Stable Index Profit
Country
International
Confidence
100%
HTTP Status
200
Report ID
0844c7ca-cff…
Analyzed
2026-02-24 05:16
Final URL (after redirects)
https://pureprofitpoint.app/es/

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T1C233C73044C86F2B52E352C47340BA5BE39A8044E6ABC65AF5F9C71E17C5D98CC3AB6D
CONTENT ssdeep
1536:w6OPKXNUBGY7V+bnQp164Do0O+FGFKEs++XQqgam:w6OPrzH22Qqm

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
916ab8b1eeeb9490
VISUAL aHash
ff0000006e6e4e4e
VISUAL dHash
71f0c4f0dcdc9cdc
VISUAL wHash
ff0030007e7e4e7e
VISUAL colorHash
02000000030
VISUAL cropResistant
0001816363890006,d28fcbcb8e8ec694,84c4c0b4a00e1c88,53c08390e0301cc6,5c4ea36064585a31,32c4d4f4dcdc9cdc

Code Analysis

Risk Score 94/100
Threat Level ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: Phishing
• Target: Cryptocurrency trading enthusiasts
• Method: Impersonation and data harvesting
• Exfil: Unknown
• Indicators: Obfuscated Javascript, form submission.
• Risk: High

🔒 Obfuscation Detected

  • fromCharCode
  • unescape
  • unicode_escape
  • base64_strings

🎯 Kit Endpoints

  • https://pureprofitpoint.app/es/login/

📡 API Calls Detected

  • POST

📊 Risk Score Breakdown

Total Risk Score
90/100

Contributing Factors

Obfuscated Javascript
Obfuscation is used to hide malicious code from detection.
Form Submission
Forms are used to collect sensitive information.
Domain mismatch
The domain is not directly related to the advertised service.
Requests for sensitive information
Asking for personal data without valid reason.

🔬 Comprehensive Threat Analysis

Threat Type
Banking Credential Harvester
Target
Stable Index Profit users (International)
Attack Method
obfuscated JavaScript
Exfiltration Channel
Form submission (backend endpoint not detected - likely JavaScript-based)
Risk Assessment
CRITICAL - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

  • Kit types: Credential Harvester, OTP Stealer, Banking, Personal Info
  • 174 obfuscation techniques

🏢 Brand Impersonation Analysis

Impersonated Brand
Stable Index Profit
Fake Service
Cryptocurrency Trading

Fraudulent Claims

⚔️ Attack Methodology

Primary Method: Credential Harvesting

The site uses a form to collect user's personal information. The site appears to be designed to trick users into providing this information.

Secondary Method: Malicious Javascript

Javascript is used to potentially redirect the user to a malicious site or to perform other harmful actions. It is obfuscated to hide its intent.

🌐 Infrastructure Indicators of Compromise

Domain Information

Domain
pureprofitpoint.app
Registered
Unknown
Registrar
Unknown
Status
Unknown

🤖 AI-Extracted Threat Intelligence

Similar Websites

Pages with identical visual appearance (based on perceptual hash)

Screenshot
Ethereum Merge
https://voltixmomentum.net/
Jul 29, 2026
 Screenshot
Solid Return (Likely Impersonated)
https://secret-crisis-blueprint.org/
Feb 24, 2026
 Screenshot
Fortune Phantom
https://fortunephantom.app/
Feb 23, 2026
 Screenshot
Bitcoin Superstar (likely fake)
https://bitcoinsuperstar.io/
Feb 22, 2026
 Screenshot
Unknown
https://bitcoinrevolution.tech/
Feb 22, 2026
😰
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.