https://petrobras.cloud/
216.150.16.193 · Vercel, Inc
Walnut, United States
154 days
200 · 29.2s
Valid· R12, Let's Encrypt, US
COMPLETED
No KB/IOK detections were recorded for this scan.
energy | technology | ecommerce · 4/15/2026
The page presents branding that mimics a premium energy domain offering under the label petrobras.cloud, but the domain is not the official Petrobras site. The HTML title and meta descriptions describe a domain for sale and include energy/cloud domain branding, while the visual screenshot shows a dark, glossy landing with a Petrobras-like color scheme and a note clarifying “Not affiliated with Petróleo Brasileiro S.A. (‘Petrobras’)” at the top. Network activity includes a POST to /_vercel/insights/view and an external script load pattern typical of dynamic SPAs. No credential harvesting form is evident in static HTML; however, the combination of the brand-like styling on a sale-domain and the presence of potential impersonation cues (visuals resembling Petrobras branding) constitutes an impersonation risk. Given the domain is a new, marketplace-style landing rather than an official Petrobras page, and the page explicitly claims domain sale, the evidence leans toward potential brand impersonation rather than legitimate first-party content.
Capture
Stages: 2
Canonical: Settled Render
Changed: No
Credential Signals
Forms: 1
Password fields: 0
Late-stage login UI: No
Resource Signals
Resources: 28
Hosts: 1
Domains: 1
Suspicious Endpoints
hxxps://petrobras[.]cloud/
The site presents a brand-mimicking landing page for a premium energy cloud domain under the petrobras.cloud domain. It explicitly states no affiliation with Petrobras and appears to be a marketplace offering rather than official Petrobras content. The impersonation indicators in branding, combined with the non-official sales framing and analytics endpoint, merit cautious handling. The page seems to be a suspicious impersonation attempt rather than a confirmed credential-phishing page on Petrobras’ official domain. Recommend monitoring and further verification of ownership, and consider takedown if similarity signals persist and user confusion risk is high.
Monitor