Security Scan: OneDrive

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c1664595-0f1e-420d-ba34-f4968ebaebc6 Domain and IP registration (RDAP)/api/v1/rdap/c1664595-0f1e-420d-ba34-f4968ebaebc6How often this domain was scanned/api/v1/domain/stats/popz.net.br Scan history for this domain/api/v1/domain/history/popz.net.br?limit=15

This website contacted 7 IPs in 2 countries across 5 domains to perform 11 HTTP transactions. The main domain is popz.net.br and was registered 1 year 1 month ago.

Submitted URL: https://popz.net.br/securfprfq/2344793036410625.html

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Fake OneDrive/Microsoft 'secure folder' verification page on popz.net.br that harvests sign-in data and exfiltrates it via device-code API calls to admin.greatgod.cfd. Brand impersonation plus credential theft — a confirmed phishing scam.

Risk Factors (5)

Brand impersonation of Microsoft/OneDrive on a non-Microsoft domain

Cross-origin credential/device-code exfiltration to admin.greatgod.cfd

Fake 'Microsoft Verified' trust badge

Social-engineering 'shared secure folder' verification lure

IDS alert for DNS query to .cfd TLD linked to the exfiltration host

Domain age information unavailable

Details

Page Title

OneDrive

Scan Type

public

Favicon Hash

MMH3: -888031596

MD5: 977e5a134b9241c4b43c53de84d33380

Domain Name Analysis

The domain name 'popz.net.br' uses the Brazilian country-code top-level domain (.net.br) with no subdomain. The second-level label 'popz' is 4 characters long holding 1 vowel versus three consonants. Breaking it apart gives 2 words: pop, z. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

E New Secure Folder Shared With You Verity your identity to access +32 MB Encnyt | shared O ony access code below O ick verity « Paste cone cr O sienna aroson account E42T8EDF Copy Code E Wait...

Page Load Overview

1.85s

Total Load Time

66 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:61%

Script:Latin

Direction:ltr

Detection Details

Text Length:295 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software38% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

38%

download file sharing

34%

documentation technical

29%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	45.187.108.10	Canoas, Rio Grande do Sul, Brazil	AS269463INTER-K Internet Service
1	142.251.14.139Google · CDN	United States	AS15169Google LLC
1	104.243.43.77	Piscataway, New Jersey, United States	AS23470ReliableSite.Net LLC
1	104.21.73.243Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.243.45.200	Piscataway, New Jersey, United States	AS23470ReliableSite.Net LLC
1	142.251.14.101Google · CDN	United States	AS15169Google LLC
1	172.67.193.119Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	7	-	-