Phishing Analysis
Detailed analysis of captured phishing page
Visual Capture
Detection Info
https://fortunephantom.app/
Detected Brand
Fortune Phantom
Country
International
Confidence
100%
HTTP Status
200
Report ID
3eb79edd-d7b…
Analyzed
2026-02-23 07:05
Final URL (after redirects)
https://fortunephantom.app/es/
Content Hashes (HTML Similarity)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T16023C431B4C46B6B61C342CBB741EA0BD2929040E26E8A5FF5D6C71E66C5DCCD827E6C |
|
CONTENT
ssdeep
|
1536:fGOPFDMYb+eBsGSoyOn9jSawrmNyuPJSnzcgX/EAxg3W:fGOPWe+qv/IGAEW |
Visual Hashes (Screenshot Similarity)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
916ab8b1eeeb9490 |
|
VISUAL
aHash
|
ff0000006e6e4e4e |
|
VISUAL
dHash
|
71f0ccf0dcdc9cdc |
|
VISUAL
wHash
|
ff0030007e7e4e7e |
|
VISUAL
colorHash
|
02000000030 |
|
VISUAL
cropResistant
|
0001416363490006,d28fcbcb8e8ec694,84c4c0b4a00e1c88,53c08390e0301cc6,5c4ea36064585a31,32d4d0f4dcdc9cdc |
Code Analysis
Risk Score
94/100
Threat Level
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Banking
🎣 Personal Info
🔬 Threat Analysis Report
• Threat: Phishing
• Target: Unsuspecting users
• Method: User sign-up form to steal data
• Exfil: Unknown
• Indicators: Suspicious domain, data harvesting form, JavaScript obfuscation
• Risk: High
🔒 Obfuscation Detected
- fromCharCode
- unescape
- unicode_escape
- base64_strings
🎯 Kit Endpoints
- https://fortunephantom.app/es/login/
📡 API Calls Detected
- POST
📊 Risk Score Breakdown
Total Risk Score
90/100
Contributing Factors
Suspicious Domain
The domain name is unrelated to any established brand.
Data Harvesting Form
The website includes a form for collecting personal data.
JavaScript Obfuscation
The website's JavaScript code is obfuscated, suggesting malicious intent.
🔬 Comprehensive Threat Analysis
Threat Type
Banking Credential Harvester
Target
Fortune Phantom users (International)
Attack Method
obfuscated JavaScript
Exfiltration Channel
Form submission (backend endpoint not detected - likely JavaScript-based)
Risk Assessment
CRITICAL - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)
⚠️ Indicators of Compromise
- Kit types: Credential Harvester, OTP Stealer, Banking, Personal Info
- 174 obfuscation techniques
🏢 Brand Impersonation Analysis
Impersonated Brand
Fortune Phantom
Fake Service
Trading platform
⚔️ Attack Methodology
Primary Method: Credential Harvesting
The site uses a sign-up form to collect user data, including personal information, which is a common tactic in phishing campaigns.
🌐 Infrastructure Indicators of Compromise
Domain Information
Domain
fortunephantom.app
Registered
None
Registrar
None
Status
None
🤖 AI-Extracted Threat Intelligence
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Ethereum Merge
https://voltixmomentum.net/
Jul 29, 2026
Solid Return (Likely Impersonated)
https://secret-crisis-blueprint.org/
Feb 24, 2026
Stable Index Profit
https://pureprofitpoint.app/
Feb 24, 2026
Bitcoin Superstar (likely fake)
https://bitcoinsuperstar.io/
Feb 22, 2026
Unknown
https://bitcoinrevolution.tech/
Feb 22, 2026
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.