EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Captura Visual

Screenshot of funding-fred.com

Información de Detección

https://funding-fred.com/
Detected Brand
Funding Fred
Country
International
Confianza
100%
HTTP Status
200
Report ID
dcf94ca7-7aa…
Analyzed
2026-07-31 23:22

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T147E28370D110CD3B019352D0E7F2A76A11A9D281DF020AF593FD47AE8BE6D9CEE6B215
CONTENT ssdeep
768:/J4g1aCx6PZeEEKNy0jmAowPUkFiCgwNj:kZeEurwPUk44j

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
d47ac5a3153cd4c3
VISUAL aHash
7cfcdc878ff7fffe
VISUAL dHash
8cc1253c1b2d1302
VISUAL wHash
64fc94848585f1fe
VISUAL colorHash
07001030001
VISUAL cropResistant
8cc1253c1b2d1302

Análisis de Código

Risk Score 79/100
Nivel de Amenaza ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Amenaza: Estafa de inversión financiera/cripto
• Objetivo: Inversores minoristas
• Método: Página de phishing diseñada para recopilar datos de usuarios a través de formularios de captura de leads.
• Exfil: Endpoint /create_lead/ utilizando JS ofuscado
• Indicadores: Código ofuscado, reclamos financieros sospechosos, patrones de captura de leads.
• Riesgo: Alto - riesgo de pérdida financiera y robo de datos.

🔐 Credential Harvesting Forms

🔒 Obfuscation Detected

  • unescape
  • unicode_escape
  • base64_strings

📡 API Calls Detected

  • POST

📤 Form Action Targets

  • /create_lead/

📊 Desglose de Puntuación de Riesgo

Total Risk Score
85/100

Contributing Factors

Obfuscation
Detection of base64/unicode_escape used to hide API endpoints.
Domain Maturity
Relatively young domain (81 days).
Deceptive Content
Unverified claims of regulation and ISO certification.

🔬 Análisis Integral de Amenazas

Tipo de Amenaza
Banking Credential Harvester
Objetivo
Funding Fred users (International)
Método de Ataque
Brand impersonation + credential harvesting forms + obfuscated JavaScript
Canal de Exfiltración
HTTP POST to backend
Evaluación de Riesgo
HIGH - Automated credential harvesting with HTTP POST to backend

⚠️ Indicators of Compromise

  • Kit types: Credential Harvester, OTP Stealer, Banking, Personal Info
  • 35 obfuscation techniques

🏢 Análisis de Suplantación de Marca

Impersonated Brand
Funding Fred
Fake Service
Investment Platform

Fraudulent Claims

⚔️ Metodología de Ataque

Primary Method: Lead Harvesting

The site aims to collect names, emails, and phone numbers of potential victims under the guise of an AI trading platform.

Secondary Method: Financial Fraud

Redirecting users to manual investment scams or direct crypto deposit requests.

🌐 Indicadores de Compromiso de Infraestructura

Domain Information

Dominio
funding-fred.com
Registered
2026-05-11
Registrar
Unknown
Estado
active

🤖 AI-Extracted Threat Intelligence

😰
"Nunca pensé que me pasaría a mí"
Esto dicen las 2.3 millones de víctimas cada año. No esperes a ser una estadística.