Security Scan: OneDrive

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/98ce8eb1-dddb-4fee-976c-06094ee50541 Domain and IP registration (RDAP)/api/v1/rdap/98ce8eb1-dddb-4fee-976c-06094ee50541How often this domain was scanned/api/v1/domain/stats/tudor.ind.br Scan history for this domain/api/v1/domain/history/tudor.ind.br?limit=15

This website contacted 7 IPs in 2 countries across 5 domains to perform 11 HTTP transactions. The main domain is tudor.ind.br and was registered 26 years ago.

Submitted URL: https://tudor.ind.br/sccre/455201300.html

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Compromised Brazilian domain hosts a fake Microsoft OneDrive 'secure folder' verification kit that relays a device/access code to admin.greatgod.cfd. Brand impersonation plus external credential relay — confirmed phishing.

Risk Factors (6)

Impersonation of Microsoft/OneDrive branding on a non-Microsoft domain

Cross-origin POST of user/device-code data to unranked admin.greatgod.cfd

Clipboard 'paste access code' harvesting flow awaiting verification

IDS alert for DNS resolution to .cfd TLD

Legitimate domain likely compromised to host malicious content

Page text asserts 'Microsoft Verified' to manufacture trust

Domain age information unavailable

Details

Page Title

OneDrive

Scan Type

public

Domain Name Analysis

The domain 'tudor.ind.br' uses the Brazilian country-code top-level domain (.ind.br) with no subdomain. The core label 'tudor' covers 5 characters split between 2 vowels and three consonants. Breaking it apart gives 1 word: tudor. No strong language cues emerged from the frequency lists.

Screenshot

E New Secure Folder Shared With You Verity your identity to access +32 MB Encnyt | shared O ony access code below O ick verity « Paste cone cr O sienna aroson account FIGKXDFCV Copy Code E Wai...

Page Load Overview

2.44s

Total Load Time

64 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:61%

Script:Latin

Direction:ltr

Detection Details

Text Length:295 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software36% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

36%

download file sharing

32%

documentation technical

29%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	143.95.215.168	Vinhedo, São Paulo, Brazil	AS31898Oracle Corporation
1	142.251.20.139Google · CDN	United States	AS15169Google LLC
1	104.243.43.77	Piscataway, New Jersey, United States	AS23470ReliableSite.Net LLC
1	172.67.193.119Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.243.45.200	Piscataway, New Jersey, United States	AS23470ReliableSite.Net LLC
1	142.251.20.102Google · CDN	United States	AS15169Google LLC
1	104.21.73.243Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	7	-	-