SafeMode - Analysis: quantiagptv3.click

Captura Visual

Informações de Detecção

https://quantiagptv3.click/

Detected Brand

Unknown/Investment Platform Impersonation

Country

International

Confiança

100%

HTTP Status

200

Report ID

abe17efa-4df…

Analyzed

2026-07-21 00:01

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T120D26232B1C4663F46A7C2C8B3206B2EB2D3838DDB9A595163F8439D0BD7E40DD5352A
CONTENT ssdeep	384:ge/GLS/bS7iRYTcR/mkiccuOkdgiWgVvLi7TKfeIYsOy2+y9BH4ciUIe:ge/GLS8IGdeA1KG7sOy2+y9BH4cLIe

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	d272fc2a8d69c5c1
VISUAL aHash	000000000000ffff
VISUAL dHash	1c0cc840cdcd9b00
VISUAL wHash	00c6e0303507ffff
VISUAL colorHash	39000c000c0
VISUAL cropResistant	0080800458988000,982c484849cdcd1b

Análise de Código

Risk Score 76/100

Nível de Ameaça ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Ameaça: Coleta de credenciais financeiras
• Alvo: Usuários buscando ferramentas de trading IA
• Método: Landing page de marketing enganosa
• Exfil: Backend desconhecido
• Indicadores: Script ofuscado, formulário de registro
• Risco: Alto

🔒 Obfuscation Detected

unescape
document.write

🎯 Kit Endpoints

login

📡 API Calls Detected

POST
/net/rag2

📊 Detalhamento da Pontuação de Risco

Total Risk Score

85/100

Contributing Factors

Suspicious TLD

.click domain

Obfuscated JS

Intentional code hiding

Request for PII

Harvesting data on a dubious site

🔬 Análise Integral de Ameaças

Tipo de Ameaça

Banking Credential Harvester

Alvo

Unknown/Investment Platform Impersonation users (International)

Método de Ataque

Brand impersonation + credential harvesting forms + obfuscated JavaScript

Canal de Exfiltração

Form submission (backend endpoint not detected - likely JavaScript-based)

Avaliação de Risco

HIGH - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

Kit types: Credential Harvester, Banking, Personal Info
8 obfuscation techniques

🏢 Análise de Falsificação de Marca

Impersonated Brand

QuantiaGPT (Generic)

Official Website

null

Fake Service

AI Trading Platform

Fraudulent Claims

⚔️ Metodologia de Ataque

Primary Method: Financial phishing / Lead Generation

The site uses a 'Get Started' funnel to harvest PII for downstream financial fraud or cold-calling scams.

Secondary Method: JS Obfuscation

Uses obfuscated code to prevent simple security analysis of the form submission destination.

🌐 Indicadores de Compromisso de Infraestrutura

Domain Information

Domínio

quantiagptv3.click

Registered

2026-05-24

Registrar

unknown

Estado

active

Phishing Analysis