Phishing Analysis
Detailed analysis of captured phishing page
Captura Visual
Informações de Detecção
https://dfxstradepress.com/
Detected Brand
Unknown FX Investment
Country
International
Confiança
100%
HTTP Status
200
Report ID
6da701eb-8ec…
Analyzed
2026-08-24 11:33
Hashes de Conteúdo (Similaridade HTML)
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1EC42A9329860AB7B11F392D563311B5A63C2928BDD330A4ABFF48B1D5FDAD45CD92205 |
|
CONTENT
ssdeep
|
96:TQdBergD1fXKyII03Km0AXxAX11QhIzedIT05bOR7XMBIwgIDINIZIaI7sXyQwWe:IBerb8035xsuyjw/6nN |
Hashes Visuais (Similaridade de Captura)
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
8d6de82dbc68e8a4 |
|
VISUAL
aHash
|
c30000080000ffff |
|
VISUAL
dHash
|
2bfa92b0f670fa20 |
|
VISUAL
wHash
|
ff00001c1e08ffff |
|
VISUAL
colorHash
|
1a000400200 |
|
VISUAL
cropResistant
|
23332b2b2b2b3323,e60080b0b430003b,20c0c8c8c84020c0,fb7ad6b0f2f472fa |
Análise de Código
Risk Score
68/100
Nível de Ameaça
ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester
🎣 Personal Info
🔬 Threat Analysis Report
• Ameaça: Fraude de Investimento
• Alvo: Investidores de varejo
• Método: Phishing financeiro
• Exfil: Desconhecido
• Indicadores: Ofuscação JS, sem regulação
• Risco: Alto
🔒 Obfuscation Detected
- fromCharCode
🎯 Kit Endpoints
- https://www.tradingview-widget.com/embed-widget/symbol-overview/?locale=en#%7B%22symbols%22%3A%5B%5B%22Apple%22%2C%22AAPL%7C1D%22%5D%2C%5B%22Google%22%2C%22GOOGL%7C1D%22%5D%2C%5B%22Microsoft%22%2C%22MSFT%7C1D%22%5D%5D%2C%22chartOnly%22%3Afalse%2C%22width%22%3A%22100%25%22%2C%22height%22%3A350%2C%22colorTheme%22%3A%22light%22%2C%22showVolume%22%3Afalse%2C%22showMA%22%3Afalse%2C%22hideDateRanges%22%3Afalse%2C%22hideMarketStatus%22%3Afalse%2C%22hideSymbolLogo%22%3Afalse%2C%22scalePosition%22%3A%22right%22%2C%22scaleMode%22%3A%22Normal%22%2C%22fontFamily%22%3A%22-apple-system%2C%20BlinkMacSystemFont%2C%20Trebuchet%20MS%2C%20Roboto%2C%20Ubuntu%2C%20sans-serif%22%2C%22fontSize%22%3A%2210%22%2C%22noTimeScale%22%3Afalse%2C%22valuesTracking%22%3A%221%22%2C%22changeMode%22%3A%22price-and-percent%22%2C%22chartType%22%3A%22area%22%2C%22maLineColor%22%3A%22%232962FF%22%2C%22maLineWidth%22%3A1%2C%22maLength%22%3A9%2C%22lineWidth%22%3A2%2C%22lineType%22%3A0%2C%22dateRanges%22%3A%5B%221d%7C1%22%2C%221m%7C30%22%2C%223m%7C60%22%2C%2212m%7C1D%22%2C%2260m%7C1W%22%2C%22all%7C1M%22%5D%2C%22utm_source%22%3A%22dfxstradepress.com%22%2C%22utm_medium%22%3A%22widget_new%22%2C%22utm_campaign%22%3A%22symbol-overview%22%2C%22page-uri%22%3A%22dfxstradepress.com%2F%22%7D
- ./login
- https://www.tradingview-widget.com/embed-widget/ticker-tape/?locale=en#%7B%22symbols%22%3A%5B%7B%22proName%22%3A%22FOREXCOM%3ASPXUSD%22%2C%22title%22%3A%22S%26P%20500%22%7D%2C%7B%22proName%22%3A%22FOREXCOM%3ANSXUSD%22%2C%22title%22%3A%22Nasdaq%20100%22%7D%2C%7B%22proName%22%3A%22FX_IDC%3AEURUSD%22%2C%22title%22%3A%22EUR%2FUSD%22%7D%2C%7B%22proName%22%3A%22BITSTAMP%3ABTCUSD%22%2C%22title%22%3A%22BTC%2FUSD%22%7D%2C%7B%22proName%22%3A%22BITSTAMP%3AETHUSD%22%2C%22title%22%3A%22ETH%2FUSD%22%7D%5D%2C%22showSymbolLogo%22%3Atrue%2C%22colorTheme%22%3A%22light%22%2C%22isTransparent%22%3Afalse%2C%22displayMode%22%3A%22adaptive%22%2C%22width%22%3A%22100%25%22%2C%22height%22%3A46%2C%22utm_source%22%3A%22dfxstradepress.com%22%2C%22utm_medium%22%3A%22widget%22%2C%22utm_campaign%22%3A%22ticker-tape%22%2C%22page-uri%22%3A%22dfxstradepress.com%2F%22%7D
- https://api.whatsapp.com/send?phone=447362048654&text=Hello
📡 API Calls Detected
- GET
📊 Detalhamento da Pontuação de Risco
Total Risk Score
85/100
Contributing Factors
JS Obfuscation
Use of fromCharCode to hide behavior.
Financial Scam Indicators
Generic 'investment' landing page without compliance info.
🔬 Análise Integral de Ameaças
Tipo de Ameaça
Credential Harvesting Kit
Alvo
Unknown FX Investment users (International)
Método de Ataque
credential harvesting forms + obfuscated JavaScript
Canal de Exfiltração
Form submission (backend endpoint not detected - likely JavaScript-based)
Avaliação de Risco
HIGH - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)
⚠️ Indicators of Compromise
- Kit types: Credential Harvester, Personal Info
- 4 obfuscation techniques
🏢 Análise de Falsificação de Marca
Impersonated Brand
N/A
Fake Service
Forex Investment Trading
Fraudulent Claims
⚔️ Metodologia de Ataque
Primary Method: Credential Harvesting / Investment Scam
Platform lures users to register to gain access to fake investment portfolios, later requesting deposits.
Secondary Method: Script Obfuscation
Uses obfuscated JS to evade simple static analysis of the registration process.
🌐 Indicadores de Compromisso de Infraestrutura
Domain Information
Domínio
dfxstradepress.com
Registered
2024-01-26
Registrar
NameCheap, Inc.
Estado
Active
🤖 AI-Extracted Threat Intelligence
"Nunca pensei que aconteceria comigo"
Isso dizem os 2,3 milhões de vítimas a cada ano. Não espere para ser uma estatística.