Verdict: likely legitimate (not enough phishing indicators)

The page presents itself as “Viva Sorte+ — Login” and says “Identifique-se usando seu CPF”. It shows a single input/CTA flow labeled CPF → “Continuar”, plus footer disclosures about a capitalização product issued by “VIA CAPITALIZAÇÃO S/A.” and mentions Susep and the beneficiary institute.

Suspicious elements checked

• Credential/PII collection form present: The form explicitly requests CPF (label “CPF” and the “loginForm” container). This is sensitive personal data collection, but there is no password field in the provided HTML.
• Security/Google warning text: The page includes “Este site é protegido pelo Google reCAPTCHA…”. This is commonly present on legitimate sites and, by itself, is not proof of phishing.
• Brand/URL relationship: The URL is resgatarvivasorte.com and the branding is Viva Sorte+. The domain appears to be aligned with the brand name (no clear mismatch like PayPal on a random domain). No evidence of an unrelated major brand impersonation is shown.
• No visible urgency/scare tactics: The HTML/OCR do not contain classic phishing prompts like “account suspended”, “unauthorized login”, “final notice”, or “immediate payment required”.
• No suspicious redirect patterns shown: The provided HTML is static and does not show links like “verify now” to third-party domains or obfuscated redirect URLs.

Why phishing is marked low

While it does collect CPF, the surrounding content contains substantial, specific regulatory/product disclosures consistent with a legitimate service page, and the branding matches the domain context. With the evidence provided, there are no strong phishing hallmarks (credential harvesting for passwords, fake security lockouts, mismatched brand/URL, or urgent account threats).

Confidence

Evidence suggests legitimacy, but because the page does collect CPF and the HTML is simplified, a definitive determination would require checking the backend form action/requests and domain registration history. Hence, phishing risk is low-to-moderate rather than zero.