SafeMode - Analysis: seunomelimpo.nacional-oficiall.org

Visual Capture

Screenshot of seunomelimpo.nacional-oficiall.org

Detection Info

https://seunomelimpo.nacional-oficiall.org/

Detected Brand

Serasa

Country

Brazil

Confidence

100%

HTTP Status

200

Report ID

0865bbde-095…

Analyzed

2026-01-04 00:07

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1ADC1A63531409D3B05278F5076C0FD4B5A0FA31EC662D8B5E2D600EF6BE5DA0CDB69AA
CONTENT ssdeep	96:A9+q1KHBbHW46GGG2JRb831ZmGaa1Y4LwC+fsIcSK:1bNLN1YNfD6

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	ea8db30c6ae58ca5
VISUAL aHash	ffffffa01010ede4
VISUAL dHash	a459474561714949
VISUAL wHash	fffffba00010e0a4
VISUAL colorHash	07200008007
VISUAL cropResistant	a459474561714949,4a13b3b3333121e4,64aa9b9a67b2aa66,713367ce1c397371,e3770f332b2521a9,f63e5e4e514d4543

Code Analysis

Risk Score 73/100

Threat Level ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 Banking

🔬 Threat Analysis Report

• Threat: Phishing campaign targeting Brazilian citizens wanting to clean up their credit score.
• Target: Serasa users in Brazil.
• Method: This is a social engineering attack attempting to trick users into providing sensitive information under the guise of cleaning their credit.
• Exfil: The data from the form will be sent to the URL defined in the form action, which points to a compromised or malicious server: https://seunomelimpo.nacional-oficiall.org/?utm_source=organic&amp;utm_campaign=&amp;utm_medium=&amp;utm_content=&amp;utm_term=
• Indicators: New domain, domain does not match official Serasa domain, form action points to suspicious URL, obfuscated JavaScript.
• Risk: HIGH - Could lead to identity theft or financial loss.