intermezzoconsultoria.com.br

Microsoft

https://intermezzoconsultoria.com.br/docs042/onedrive-verify-obf.html Access site

Screenshot

Investigate

Domain intermezzoconsultoria.com.br12 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

See every phishunt record for this domain

IP 18.229.174.63

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://intermezzoconsultoria.com.br/docs042/onedrive-verif…

urlscan

Wayback

archive.today

Cert YR2

crt.sh

Censys

Google CT

Phishunt analysis Beta

26 low suspicionheuristic risk score · not a probability

Why?

+5.3 Keyword match
+5.1 Site cluster
+4.1 Brand in screenshot
+3.0 OpenPhish
+2.2 Country mismatch
+1.1 ASN reputation
+1.1 No CSP header
+1.1 No HSTS header
+0.7 Unrecognised DNS provider
+0.6 Brand impersonation in path
+0.6 Long domain
+0.6 Suspicious TLD
+0.4 Credential path
+0.3 Free CA
+0.1 Deep subdomain

18 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

A page impersonating Microsoft OneDrive is embedded at an obfuscated path on a Brazilian consultancy domain hosted in South America via AWS. The brand-off-host pattern and suspicious path are confirmed malicious by OpenPhish, consistent with credential harvesting.

Brand impersonation in pathCredential pathOpenPhish

AI-generated from stored detector signals - the AI never visited the site. · 2026-09-17 · confidence 60%

Domain & Network

Whois

Network

IP 18.229.174.63

Country