EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Captura Visual

Screenshot of primestonepartnersag.com

Informações de Detecção

https://primestonepartnersag.com/
Detected Brand
PrimeStone Partners AG
Country
International
Confiança
100%
HTTP Status
200
Report ID
4c2c7631-efd…
Analyzed
2026-08-28 01:05

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T15B8362A1BA435835216F12CFC11F1B0C61C2D7C9DB2396E866F8423897F5CA57FA72A4
CONTENT ssdeep
768:l2n3KDR2iqvSkhKVFILFsDF0Di1C55eCIgsCTX:lu3KDR2iqKCKwCyDi1C505gsCTX

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
ecee1399c76c9244
VISUAL aHash
fff3f1f1f3cb8100
VISUAL dHash
d0272727271317d4
VISUAL wHash
fff1f1f1f1c30000
VISUAL colorHash
0f001000180
VISUAL cropResistant
d0272727271317d4,7b765c30e0dc7c79,e1e0f0f0e0c0c0c0,553169647c74e9f8,0000000000000000,0000000000000000

Análise de Código

Risk Score 79/100
Nível de Ameaça ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Ameaça: Fraude de Investimento em Cripto
• Alvo: Usuários Financeiros/Cripto
• Método: Representação de firma de investimento
• Exfil: Submissão de formulário via JavaScript
• Indicadores: Código ofuscado, branding genérico
• Risco: Perda financeira via roubo de ativos

🔒 Obfuscation Detected

  • atob
  • fromCharCode
  • unicode_escape

🎯 Kit Endpoints

  • https://inv.primestone-partners-ag.com/login

📡 API Calls Detected

  • POST

📊 Detalhamento da Pontuação de Risco

Total Risk Score
88/100

Contributing Factors

Obfuscated Code
Use of atob/fromCharCode to mask logic
Domain Maturity
Low domain age (45 days)
Content Type
Crypto investment solicitation

🔬 Análise Integral de Ameaças

Tipo de Ameaça
Banking Credential Harvester
Alvo
PrimeStone Partners AG users (International)
Método de Ataque
Brand impersonation + credential harvesting forms + obfuscated JavaScript
Canal de Exfiltração
Form submission (backend endpoint not detected - likely JavaScript-based)
Avaliação de Risco
HIGH - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

  • Kit types: Credential Harvester, OTP Stealer, Banking, Personal Info
  • 628 obfuscation techniques

🏢 Análise de Falsificação de Marca

Impersonated Brand
PrimeStone Partners AG
Fake Service
Cryptocurrency investment and brokerage

Fraudulent Claims

⚔️ Metodologia de Ataque

Primary Method: Fake Investment Portal

The site acts as a gateway to collect personal information from victims interested in cryptocurrency trading.

Secondary Method: Credential Harvesting

Forms designed to capture email and phone numbers for high-pressure sales calls.

🌐 Indicadores de Compromisso de Infraestrutura

Domain Information

Domínio
primestonepartnersag.com
Registered
2026-07-13
Registrar
unknown
Estado
active

🤖 AI-Extracted Threat Intelligence

😰
"Nunca pensei que aconteceria comigo"
Isso dizem os 2,3 milhões de vítimas a cada ano. Não espere para ser uma estatística.