SafeMode - Analysis: directpatrimonor.com

Captura Visual

Información de Detección

https://directpatrimonor.com/

Detected Brand

Unknown/Investment Scam

Country

International

Confianza

90%

HTTP Status

200

Report ID

aeedf42b-b6f…

Analyzed

2026-08-12 23:15

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1478285B5B1456D3B82D3C2C2F771B72BE3938285DD8B6618B3F9971A4DC1E81CC1906A
CONTENT ssdeep	192:fnyv22fq7s44KnI2Ai7mP1k2vsGhgch6IoAas2f/TXamvTvWvLO:fnC22944aIib2vScwyLO

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	c3e738388e47c333
VISUAL aHash	00207c747c60003c
VISUAL dHash	d041c8c0ccc23171
VISUAL wHash	00e1fefe7e70003c
VISUAL colorHash	38c00000000
VISUAL cropResistant	d041c8c0ccc23171

Análisis de Código

Risk Score 53/100

Nivel de Amenaza ALTO

⚠️ Phishing Confirmed

🎣 OTP Stealer

🔬 Threat Analysis Report

• Amenaza: Estafa de inversión financiera
• Objetivo: Inversores minoristas
• Método: Gancho de trading con IA
• Exfil: Envío de formulario
• Indicadores: Branding de inversión genérico
• Riesgo: Pérdida financiera crítica

🔒 Obfuscation Detected

unescape

📡 API Calls Detected

POST
/api/sms/send
/api/sms-verification-status
/api/sms/verify

📊 Desglose de Puntuación de Riesgo

Total Risk Score

85/100

Contributing Factors

Content Analysis

High-risk investment claims typical of fraud.

Technical

Obfuscated JS detected on landing page.

🔬 Análisis Integral de Amenazas

Tipo de Amenaza

Two-Factor Authentication Stealer

Objetivo

Unknown/Investment Scam users (International)

Método de Ataque

obfuscated JavaScript

Canal de Exfiltración

Form submission (backend endpoint not detected - likely JavaScript-based)

Evaluación de Riesgo

MEDIUM - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

Kit types: OTP Stealer
2 obfuscation techniques

🏢 Análisis de Suplantación de Marca

Impersonated Brand

Direct Patrimonor

Fake Service

Automated Investment Platform

Fraudulent Claims

⚔️ Metodología de Ataque

Primary Method: Investment Scam

Promising unrealistic financial returns via an AI trading bot to induce victims to register and deposit assets.

Secondary Method: Credential Harvesting

Phishing form collects user registration data for contact by scammers.

Target Blockchain

Not specified

🌐 Indicadores de Compromiso de Infraestructura

Domain Information

Dominio

directpatrimonor.com

Registered

2026-03-16

Registrar

Unknown

Estado

active

Phishing Analysis