SafeMode - Analysis: automatestockpro.com

Captura Visual

Informações de Detecção

https://automatestockpro.com/

Detected Brand

Automate Stock Investments

Country

International

Confiança

100%

HTTP Status

200

Report ID

8063c9ca-182…

Analyzed

2026-08-09 23:20

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T12C939A34E1500A7304C39285EFF3672E51A5E729CE230DAF97F8831A6B8BD989F15935
CONTENT ssdeep	1536:tAuNZVW5YmxoTAD0OOUhcDU6xwyGnnRylwiXNdEUMEkyydO3jGWQZ+vwv:9Z2KdEUMEkyy+6v8vwv

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	8d897370b0cf6cf0
VISUAL aHash	5e38393c1c003c00
VISUAL dHash	98f2e3f2b0f0f054
VISUAL wHash	7e3f3c3e1c007c94
VISUAL colorHash	31206000000
VISUAL cropResistant	5331b308c612424d,98f2e3f2b0f0f054

Análise de Código

Risk Score 76/100

Nível de Ameaça ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Personal Info

🔬 Threat Analysis Report

• Ameaça: Golpe de Investimento
• Alvo: Usuários financeiros/cripto
• Método: Portal de phishing com promessas falsas de retornos
• Exfil: Submissão de formulário via JavaScript
• Indicadores: Código ofuscado, imagens genéricas
• Risco: Crítico

🔒 Obfuscation Detected

eval
fromCharCode

🎯 Kit Endpoints

login

📊 Detalhamento da Pontuação de Risco

Total Risk Score

95/100

Contributing Factors

JavaScript Obfuscation

Use of eval and fromCharCode to hide submission logic

Financial Phishing

Claims to be a crypto investment firm without regulation

Domain Age

Relatively new domain registration

🔬 Análise Integral de Ameaças

Tipo de Ameaça

Two-Factor Authentication Stealer

Alvo

Automate Stock Investments users (International)

Método de Ataque

Brand impersonation + credential harvesting forms + obfuscated JavaScript

Canal de Exfiltração

Form submission (backend endpoint not detected - likely JavaScript-based)

Avaliação de Risco

HIGH - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

Kit types: Credential Harvester, OTP Stealer, Personal Info
20 obfuscation techniques

🏢 Análise de Falsificação de Marca

Impersonated Brand

Automate Stock Investments

Fake Service

Automated Investment Platform

Fraudulent Claims

⚔️ Metodologia de Ataque

Primary Method: Credential Harvesting

The site lures victims to register under the guise of an investment service to steal email/password combinations.

Secondary Method: Data Exfiltration

Forms are processed via obfuscated JS to redirect sensitive input to external malicious servers.

Target Blockchain

Multiple

🌐 Indicadores de Compromisso de Infraestrutura

Domain Information

Domínio

automatestockpro.com

Registered

2026-04-24

Registrar

Unknown

Estado

Active

Phishing Analysis