SafeMode - Analysis: quantiagptv3.click

Captura Visual

Información de Detección

https://quantiagptv3.click/

Detected Brand

Unknown/Investment Platform Impersonation

Country

International

Confianza

100%

HTTP Status

200

Report ID

abe17efa-4df…

Analyzed

2026-07-21 00:01

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T120D26232B1C4663F46A7C2C8B3206B2EB2D3838DDB9A595163F8439D0BD7E40DD5352A
CONTENT ssdeep	384:ge/GLS/bS7iRYTcR/mkiccuOkdgiWgVvLi7TKfeIYsOy2+y9BH4ciUIe:ge/GLS8IGdeA1KG7sOy2+y9BH4cLIe

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	d272fc2a8d69c5c1
VISUAL aHash	000000000000ffff
VISUAL dHash	1c0cc840cdcd9b00
VISUAL wHash	00c6e0303507ffff
VISUAL colorHash	39000c000c0
VISUAL cropResistant	0080800458988000,982c484849cdcd1b

Análisis de Código

Risk Score 76/100

Nivel de Amenaza ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Amenaza: Cosecha de credenciales financieras
• Objetivo: Usuarios buscando herramientas de trading con IA
• Método: Landing page de marketing engañosa
• Exfil: Backend desconocido
• Indicadores: Script ofuscado, formulario de registro
• Riesgo: Alto

🔒 Obfuscation Detected

unescape
document.write

🎯 Kit Endpoints

login

📡 API Calls Detected

POST
/net/rag2

📊 Desglose de Puntuación de Riesgo

Total Risk Score

85/100

Contributing Factors

Suspicious TLD

.click domain

Obfuscated JS

Intentional code hiding

Request for PII

Harvesting data on a dubious site

🔬 Análisis Integral de Amenazas

Tipo de Amenaza

Banking Credential Harvester

Objetivo

Unknown/Investment Platform Impersonation users (International)

Método de Ataque

Brand impersonation + credential harvesting forms + obfuscated JavaScript

Canal de Exfiltración

Form submission (backend endpoint not detected - likely JavaScript-based)

Evaluación de Riesgo

HIGH - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

Kit types: Credential Harvester, Banking, Personal Info
8 obfuscation techniques

🏢 Análisis de Suplantación de Marca

Impersonated Brand

QuantiaGPT (Generic)

Official Website

null

Fake Service

AI Trading Platform

Fraudulent Claims

⚔️ Metodología de Ataque

Primary Method: Financial phishing / Lead Generation

The site uses a 'Get Started' funnel to harvest PII for downstream financial fraud or cold-calling scams.

Secondary Method: JS Obfuscation

Uses obfuscated code to prevent simple security analysis of the form submission destination.

🌐 Indicadores de Compromiso de Infraestructura

Domain Information

Dominio

quantiagptv3.click

Registered

2026-05-24

Registrar

unknown

Estado

active

Phishing Analysis