SafeMode - Analysis: merceariapronta.com.br

Visual Capture

Detection Info

https://merceariapronta.com.br/oficebr0u/

Detected Brand

BROU

Country

Uruguay

Confidence

100%

HTTP Status

200

Report ID

0130a8c8-859…

Analyzed

2026-01-05 23:25

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T13022B6330200D57BA67788DCB5A5230A72C3C14DC826A0D4F7EE8789CBEECD4D86EA15
CONTENT ssdeep	192:O5STAzrz0q/IV0EIBTq9lH1/xCpPYqaJaWU:O4AhIVe48daJaWU

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	b333595c66665c4c
VISUAL aHash	00ffffe7ffffffff
VISUAL dHash	1810144d0c100000
VISUAL wHash	0003c3c3e0e0fcfc
VISUAL colorHash	07000000180
VISUAL cropResistant	0000404040400000,1c100c4d30080000,4040404040800000

Code Analysis

Risk Score 100/100

Threat Level ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Personal Info

🔬 Threat Analysis Report

• Threat: Credential harvesting phishing targeting Banco República (BROU) users.
• Target: Users of Banco República (BROU) in Uruguay.
• Method: Presents a fake login page to steal credentials (document number and password).
• Exfil: Unknown. The destination of the stolen credentials is not visible.
• Indicators: Domain does not match the official website, login form is present, and the page imitates the Banco República (BROU) logo.
• Risk: HIGH - Immediate credential theft possible.