The page presents itself as an “educational” platform to “consulte gratuitamente seu CPF” (check your CPF) and says it has “Sem vínculo com bancos ou órgãos oficiais.” The HTML contains no visible login/credential form, password field, or payment/OTP collection, and it explicitly claims “Nenhum dado sensível é solicitado.”

However, the domain (pesquisabr.online) is not associated with any official CPF authority and the copy promises to identify “registros financeiros vinculados” that users may expect from government/financial institutions. While the current HTML looks like a lead-in landing page (“Iniciar consulta”) rather than a direct form submission, it still could be part of a multi-step flow that later collects personal data. Overall, evidence of active credential harvesting is insufficient, so the verdict is conservative.

Suspicious signals are present primarily at the branding/authority level (independent platform vs. CPF-related promise) and the generic marketing/redirect parameters, but no direct phishing form elements were found in the provided content.