EN ES PT

Phishing Analysis

Detailed analysis of captured phishing page

Back to Stats

Captura Visual

Screenshot of primeroyaltrustcapital.com

Informações de Detecção

https://primeroyaltrustcapital.com/
Detected Brand
Prime Royal Trust Capital
Country
International
Confiança
100%
HTTP Status
200
Report ID
eee54341-b26…
Analyzed
2026-08-28 01:02

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm Hash Value
CONTENT TLSH
T1D473B7704246461AE697E1C0FE329B4A53958305C3074D6CB7F36927FE8ED78ED3A6A0
CONTENT ssdeep
1536:JE45csK4usrGbSntyVAtJUL2Ydgh6XEiPEeeekeee8eeeQeeefeeeZeeepeeefe5:JdEgP6n

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm Hash Value
VISUAL pHash
db95f2e2a1c8cce0
VISUAL aHash
ff001808091800fd
VISUAL dHash
793830535ba33919
VISUAL wHash
ff08183969d880ff
VISUAL colorHash
00038000000
VISUAL cropResistant
0041696161690078,8080422b29808080,3939393939398a04,3838305b5ba3b939

Análise de Código

Risk Score 79/100
Nível de Ameaça ALTO
⚠️ Phishing Confirmed
🎣 Credential Harvester 🎣 OTP Stealer 🎣 Banking 🎣 Personal Info

🔬 Threat Analysis Report

• Ameaça: Phishing Financeiro
• Alvo: Credenciais bancárias
• Método: Personificação de instituição financeira falsa
• Exfil: Envio de formulário JavaScript
• Indicadores: Código ofuscado e domínio de alto risco
• Risco: Alto

🔒 Obfuscation Detected

  • fromCharCode
  • hex_escape
  • unicode_escape

🎯 Kit Endpoints

  • https://primeroyaltrustcapital.com/login
  • login

📡 API Calls Detected

  • GET

📊 Detalhamento da Pontuação de Risco

Total Risk Score
95/100

Contributing Factors

Domain Age
Very new domain
Obfuscation
Detected obfuscated JS for data submission
Financial Fraud
Impersonating a bank without regulatory presence

🔬 Análise Integral de Ameaças

Tipo de Ameaça
Banking Credential Harvester
Alvo
Prime Royal Trust Capital users (International)
Método de Ataque
Brand impersonation + credential harvesting forms + obfuscated JavaScript
Canal de Exfiltração
Form submission (backend endpoint not detected - likely JavaScript-based)
Avaliação de Risco
HIGH - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

  • Kit types: Credential Harvester, OTP Stealer, Banking, Personal Info
  • 136 obfuscation techniques

🏢 Análise de Falsificação de Marca

Impersonated Brand
Prime Royal Trust Capital
Fake Service
Banking Services

Fraudulent Claims

⚔️ Metodologia de Ataque

Primary Method: Credential Harvesting

The site mimics a banking portal to prompt users for login credentials via a fake 'E-Banking' login flow.

Secondary Method: Social Engineering

Use of authoritative but fake trust badges to lower user suspicion.

🌐 Indicadores de Compromisso de Infraestrutura

Domain Information

Domínio
primeroyaltrustcapital.com
Registered
2026-07-23
Registrar
Unknown
Estado
Active

🤖 AI-Extracted Threat Intelligence

😰
"Nunca pensei que aconteceria comigo"
Isso dizem os 2,3 milhões de vítimas a cada ano. Não espere para ser uma estatística.