EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Visual Capture

Screenshot of euroquantumpro.com

Detection Info

https://euroquantumpro.com/
Detected Brand
EuroQuantum
Country
International
Confidence
92%
HTTP Status
200
Report ID
9a2ea371-cc3…
Analyzed
2026-07-21 23:38

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T186A37A33411935274437C6D130A55B3BE2E69E5FFA970A010EECD7EA1BFACA0B45B11A
CONTENT ssdeep
768:YPmebUXLz4NP3+mZY9svblTOCVr0vSYQfr2a81uGqhPiiSL:RLz4NP/y9svbliCdvos8

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
d361e9361d6992c5
VISUAL aHash
006470202e0e797e
VISUAL dHash
98ccc4caecccc3d4
VISUAL wHash
006470382e0effff
VISUAL colorHash
38000038000
VISUAL cropResistant
04324c4c4c4c2008,98ccc4caecccc3d4

Code Analysis

Risk Score 69/100
Threat Level ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester

🔬 Threat Analysis Report

• Threat: Financial Fraud / Phishing
• Target: EuroQuantum trading platform
• Method: Impersonation with lead-gen form
• Exfil: /api/lead endpoint
• Indicators: Obfuscated JS, suspicious onboarding form
• Risk: High (data theft/financial scam)

🔐 Credential Harvesting Forms

🔒 Obfuscation Detected

  • fromCharCode
  • unicode_escape
  • base64_strings

🎯 Kit Endpoints

  • login.html

📡 API Calls Detected

  • /api/lead
  • get

📤 Form Action Targets

  • /api/lead

📊 Risk Score Breakdown

Total Risk Score
90/100

Contributing Factors

Obfuscated JS
Attempt to conceal form submission targets.
Form Data Harvesting
Collecting PII via a non-verifiable site.
Domain Age
Relatively recent registration for a 'financial' service.

🔬 Comprehensive Threat Analysis

Threat Type
Credential Harvesting Kit
Target
EuroQuantum users (International)
Attack Method
Brand impersonation + credential harvesting forms + obfuscated JavaScript
Exfiltration Channel
HTTP POST to backend
Risk Assessment
HIGH - Automated credential harvesting with HTTP POST to backend

⚠️ Indicators of Compromise

  • Kit types: Credential Harvester
  • 54 obfuscation techniques

🏢 Brand Impersonation Analysis

Impersonated Brand
EuroQuantum
Fake Service
Automated Trading Bot

Fraudulent Claims

⚔️ Attack Methodology

Primary Method: Financial Lead-Gen Phishing

The site gathers names, emails, and phone numbers to supply criminal networks with targets for investment scams.

Secondary Method: JS Obfuscation

Uses obfuscation to evade static security scanning of API calls.

🌐 Infrastructure Indicators of Compromise

Domain Information

Domain
euroquantumpro.com
Registered
2026-02-01
Registrar
N/A
Status
active

🤖 AI-Extracted Threat Intelligence

😰
"I Never Thought It Would Happen to Me"
That's what 2.3 million victims say every year. Don't wait to become a statistic.