Phishing Analysis
Detailed analysis of captured phishing page
Captura Visual
Información de Detección
https://fortunephantom.app/
Detected Brand
Fortune Phantom
Country
International
Confianza
100%
HTTP Status
200
Report ID
3eb79edd-d7b…
Analyzed
2026-02-23 07:05
Final URL (after redirects)
https://fortunephantom.app/es/
Hashes de Contenido (Similitud HTML)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T16023C431B4C46B6B61C342CBB741EA0BD2929040E26E8A5FF5D6C71E66C5DCCD827E6C |
|
CONTENT
ssdeep
|
1536:fGOPFDMYb+eBsGSoyOn9jSawrmNyuPJSnzcgX/EAxg3W:fGOPWe+qv/IGAEW |
Hashes Visuales (Similitud de Captura)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
916ab8b1eeeb9490 |
|
VISUAL
aHash
|
ff0000006e6e4e4e |
|
VISUAL
dHash
|
71f0ccf0dcdc9cdc |
|
VISUAL
wHash
|
ff0030007e7e4e7e |
|
VISUAL
colorHash
|
02000000030 |
|
VISUAL
cropResistant
|
0001416363490006,d28fcbcb8e8ec694,84c4c0b4a00e1c88,53c08390e0301cc6,5c4ea36064585a31,32d4d0f4dcdc9cdc |
Análisis de Código
Risk Score
94/100
Nivel de Amenaza
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 OTP Stealer
🎣 Banking
🎣 Personal Info
🔬 Threat Analysis Report
• Amenaza: Phishing
• Objetivo: Usuarios desprevenidos
• Método: Formulario de registro de usuario para robar datos
• Exfil: Desconocido
• Indicadores: Dominio sospechoso, formulario de recolección de datos, ofuscación de JavaScript
• Riesgo: Alto
🔒 Obfuscation Detected
- fromCharCode
- unescape
- unicode_escape
- base64_strings
🎯 Kit Endpoints
- https://fortunephantom.app/es/login/
📡 API Calls Detected
- POST
📊 Desglose de Puntuación de Riesgo
Total Risk Score
90/100
Contributing Factors
Suspicious Domain
The domain name is unrelated to any established brand.
Data Harvesting Form
The website includes a form for collecting personal data.
JavaScript Obfuscation
The website's JavaScript code is obfuscated, suggesting malicious intent.
🔬 Análisis Integral de Amenazas
Tipo de Amenaza
Banking Credential Harvester
Objetivo
Fortune Phantom users (International)
Método de Ataque
obfuscated JavaScript
Canal de Exfiltración
Form submission (backend endpoint not detected - likely JavaScript-based)
Evaluación de Riesgo
CRITICAL - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)
⚠️ Indicators of Compromise
- Kit types: Credential Harvester, OTP Stealer, Banking, Personal Info
- 174 obfuscation techniques
🏢 Análisis de Suplantación de Marca
Impersonated Brand
Fortune Phantom
Fake Service
Trading platform
⚔️ Metodología de Ataque
Primary Method: Credential Harvesting
The site uses a sign-up form to collect user data, including personal information, which is a common tactic in phishing campaigns.
🌐 Indicadores de Compromiso de Infraestructura
Domain Information
Dominio
fortunephantom.app
Registered
None
Registrar
None
Estado
None
🤖 AI-Extracted Threat Intelligence
Similar Websites
Pages with identical visual appearance (based on perceptual hash)
Ethereum Merge
https://voltixmomentum.net/
Jul 29, 2026
Solid Return (Likely Impersonated)
https://secret-crisis-blueprint.org/
Feb 24, 2026
Stable Index Profit
https://pureprofitpoint.app/
Feb 24, 2026
Bitcoin Superstar (likely fake)
https://bitcoinsuperstar.io/
Feb 22, 2026
Desconocido
https://bitcoinrevolution.tech/
Feb 22, 2026
"Nunca pensé que me pasaría a mí"
Esto dicen las 2.3 millones de víctimas cada año. No esperes a ser una estadística.