Security Report: netorg679262-my.sharepoint.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2ecf72fe-dc66-4d45-a939-6b065f09ac61 Domain and IP registration (RDAP)/api/v1/rdap/2ecf72fe-dc66-4d45-a939-6b065f09ac61How often this domain was scanned/api/v1/domain/stats/netorg679262-my.sharepoint.com Scan history for this domain/api/v1/domain/history/netorg679262-my.sharepoint.com?limit=15

This website contacted 17 IPs in 6 countries across 12 domains to perform 106 HTTP transactions. The main domain is sharepoint.com and was registered 28 years ago.

Submitted URL: https://netorg679262-my.sharepoint.com/:f:/g/personal/brandi_lpckc_com/EsGlowtg98dPjzEpiiJUyrgBuJ81B6oGiV_UfDSRvKFBIQ?e=qi2KND

Effective URL:

https://netorg679262-my.sharepoint.com/personal/brandi_lpckc_com/_layo...

Redirected

The Cisco Umbrella rank of the primary domain is #66 of the top 1 million websitesTop 100 Site

AI Security Verdict

Moderate Risk

Confidence: 62%

Risk Score

Genuine Microsoft SharePoint page, no phishing forms or malware signals; however the shared folder's payment-themed filenames match unsolicited invoice-lure patterns — verify the sender out-of-band before opening files.

Risk Factors (2)

Unsolicited shared file delivered via a tenant-hosted OneDrive account with payment-themed filenames — a common business-email-compromise / invoice-lure delivery pattern

Page text uses urgency framing ('SEE PAYMENT BELOW', 'ACCESS HERE TO REVIEW') though the actual file payload was not scanned

Safety Factors (4)

Genuine, long-established Microsoft sharepoint.com domain (top-100 Umbrella ranking)

No forms, no credential or payment capture, no JavaScript credential handling

No threat-intel, hunting rule, IDS or kit-roster matches

All third-party script hosts are legitimate Microsoft endpoints

Domain age information unavailable

Details

Page Title

review-payment - OneDrive

Scan Type

public

Favicon Hash

MMH3: 1521003384

MD5: ed9e97852e827bf8828e875735d92022

Domain Name Analysis

Domain 'netorg679262-my.sharepoint.com' uses the commercial generic top-level domain (.com), featuring subdomain 'netorg679262-my'. The second-level label 'sharepoint' is 10 characters long holding 4 vowels versus 6 consonants. It segments into 2 words: share, point. Expect 5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

OneDrive g ? v Details sb Download ¥ Sort ©) Brandi Reynolds >» payment > review-payment @ 23 OQ Name v Modified® » ModifiedBy » File size v Sharing ~ Activity c: 'S) SEE PAYMENT BELOW PE duly 23...

Page Load Overview

19.12s

Total Load Time

2.8 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-us

Text Length:432 chars

Detector Agreement:100%

Website Classification

Primary Category

download file sharing68% confidence

Type: spa

Method: ml+structural+ocr_tiebreaker

All Detected Categories

download file sharing

68%

documentation technical

42%

finance banking

28%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	13.107.136.10Office365 · CLOUD	Redmond, Washington, United States	AS8075Microsoft Corporation
6	13.107.138.10Office365 · CLOUD	Redmond, Washington, United States	AS8075Microsoft Corporation
6	23.44.215.202Akamai · CDN	Prague, Prague, Czech Republic	AS20940Akamai International B.V.
6	23.197.138.234Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
6	23.44.215.178Akamai · CDN	Prague, Prague, Czech Republic	AS20940Akamai International B.V.
6	104.109.143.96Akamai · CDN	Haarlem, North Holland, Netherlands	AS20940Akamai International B.V.
6	104.109.143.97Akamai · CDN	Haarlem, North Holland, Netherlands	AS20940Akamai International B.V.
6	74.151.238.96Azure · CLOUD	Dulles, Virginia, United States	AS8075Microsoft Corporation
6	2.21.239.17Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
6	52.123.129.14Office365 · CLOUD	United States	AS8075Microsoft Corporation
106	17	-	-