EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Captura Visual

Screenshot of amorimheritagegroup.digital

Informações de Detecção

https://amorimheritagegroup.digital/
Detected Brand
Amorim Heritage Group (Likely fictitious/Investment Scam)
Country
International
Confiança
100%
HTTP Status
200
Report ID
a5adc0f3-70c…
Analyzed
2026-07-20 23:13

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T1D2C28671A114273B02B782C9B3A5BB1E66E38249C74B191153FDC36D4BE7E10AE37167
CONTENT ssdeep
768:Ce7Vd0dkK7zsCvA8aV17sOy2+y9BH4c1Ie:3d03stj7sOy2+UBH4c1Ie

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
c3469431bc3ce5e5
VISUAL aHash
002430000000ffff
VISUAL dHash
dcc9c0ccc8c8c800
VISUAL wHash
227c7c300060ffff
VISUAL colorHash
39048000e00
VISUAL cropResistant
0880880458988000,dcc9c8e4c8c8c8c8

Análise de Código

Risk Score 76/100
Nível de Ameaça ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Ameaça: Golpe financeiro
• Alvo: Usuários de trading/cripto
• Método: Engenharia social via promessa de plataforma de trading
• Exfil: Dados pessoais via formulário web
• Indicadores: JS ofuscado, reivindicações de negócios suspeitas
• Risco: Crítico

🔒 Obfuscation Detected

  • unescape
  • document.write

🎯 Kit Endpoints

  • login

📡 API Calls Detected

  • /net/register/lax4mf
  • POST

📊 Detalhamento da Pontuação de Risco

Total Risk Score
95/100

Contributing Factors

Code Obfuscation
Use of unescape/document.write to hide form submission logic
Deceptive Financial Claims
Contradictory disclaimer vs marketing copy
Data Collection
Harvesting PII on non-validated entity

🔬 Análise Integral de Ameaças

Tipo de Ameaça
Banking Credential Harvester
Alvo
Amorim Heritage Group (Likely fictitious/Investment Scam) users (International)
Método de Ataque
Brand impersonation + credential harvesting forms + obfuscated JavaScript
Canal de Exfiltração
Form submission (backend endpoint not detected - likely JavaScript-based)
Avaliação de Risco
HIGH - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

  • Kit types: Credential Harvester, OTP Stealer, Banking, Personal Info
  • 8 obfuscation techniques

🏢 Análise de Falsificação de Marca

Impersonated Brand
Amorim Heritage Group
Official Website
None
Fake Service
Automated Trading Orchestration

Fraudulent Claims

⚔️ Metodologia de Ataque

Primary Method: Financial Fraud / Advance Fee

Uses professional UI to appear as a legitimate trading platform, aiming to gather contact information for follow-up investment scams.

Secondary Method: Data Harvesting

Collecting full names, emails, and phone numbers for use in phishing campaigns or sale to other threat actors.

🌐 Indicadores de Compromisso de Infraestrutura

Domain Information

Domínio
amorimheritagegroup.digital
Registered
Unknown
Registrar
Unknown
Estado
Unknown

🤖 AI-Extracted Threat Intelligence

😰
"Nunca pensei que aconteceria comigo"
Isso dizem os 2,3 milhões de vítimas a cada ano. Não espere para ser uma estatística.