arif.primehostbd.shop

Microsoft

https://arif.primehostbd.shop/invest.dk/onedrive-verify-obf.html Access site

Screenshot

Investigate

Domain arif.primehostbd.shop192 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

IP 201.7.16.43

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://arif.primehostbd.shop/invest.dk/onedrive-verify-obf…

urlscan

Wayback

archive.today

Cert YE1

crt.sh

Censys

Google CT

Phishunt analysis Beta

22 low suspicionheuristic risk score · not a probability

Why?

+5.3 Keyword match
+4.1 Brand in screenshot
+3.0 OpenPhish
+2.2 Country mismatch
+1.1 ASN reputation
+1.1 No CSP header
+1.1 No HSTS header
+0.7 Unrecognised DNS provider
+0.7 Suspicious TLD
+0.6 Brand impersonation in path
+0.5 Young certificate
+0.4 Long domain
+0.4 Credential path
+0.3 Free CA
+0.1 Deep subdomain

18 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Impersonates Microsoft OneDrive verification on an unrelated .shop domain hosted in India, with an obfuscated HTML filename referencing OneDrive in the path. Confirmed malicious by OpenPhish, targeting Microsoft account credentials via a misleadingly named page.

OpenPhishBrand impersonation in pathCredential path

AI-generated from stored detector signals - the AI never visited the site. · 2026-09-07 · confidence 65%

Domain & Network

Whois

Network

IP 201.7.16.43

Country