Security Scan Report: economic-poet-b50.notion.site

Submitted: Completed: publiccompleted
This website contacted 9 IPs in 1 country across 5 domains to perform 980 HTTP transactions. The main domain is notion.site and was registered 5 years ago.

Submitted URL: https://economic-poet-b50.notion.site/Microsoft-Office-365-7782e9e7e96e4bcd8a7a528b7505a1c3

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Microsoft Office 365/OneDrive-branded 'shared PDF' lure hosted on a free Notion subdomain. No form on this page, but the brand impersonation and click-through lure indicate a phishing landing stage - avoid clicking.

Risk Factors (4)
Impersonation of a different entity's brand (Microsoft Office 365 / OneDrive for Business) on a non-Microsoft domain
Classic 'document shared with you' social-engineering lure with a click-through call to action
Use of a free Notion subdomain to lend apparent legitimacy to a Microsoft-branded document notice
Brand inconsistency between the hosting platform branding and the page's claimed service
Domain age information unavailable

Details

Page Title

Microsoft Office 365

Scan Type

public

Domain Name Analysis

Within the .site top-level domain, 'economic-poet-b50.notion.site' is registered and includes subdomain 'economic-poet-b50'. The second-level label 'notion' is 6 characters long split between 3 vowels and three consonants. Breaking it apart gives one word: notion. Median word length comes out to six characters. No strong language cues emerged from the frequency lists.

Screenshot

@ Microsoft Office 365 Q & ++ [eateries sai Miicrosort Microsoft Office 365 @ Created By @® Roberta Silva Un documento PDF é stato condiviso con te su OneDrive for Business. Per visualizzare, far...

Page Load Overview

90.27s
Total Load Time
10.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:446 chars
Detector Agreement:75%

Website Classification

Primary Category

download file sharing67% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

download file sharing
67%
technology software
46%
documentation technical
42%
corporate business
28%
adult content
25%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
116208.103.161.33United States
AS33191Notion Labs, Inc.
108208.103.161.32United States
AS33191Notion Labs, Inc.
10834.228.45.57Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
108208.103.161.1United States
AS33191Notion Labs, Inc.
108208.103.161.2United States
AS33191Notion Labs, Inc.
10818.214.252.60Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
10844.215.234.239Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
10834.160.81.0Google · CDNKansas City, Missouri, United States
AS396982Google LLC
108208.103.161.17United States
AS33191Notion Labs, Inc.
9809--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T154331B309A10306D4627A690F5A1A34E7227C35BDB1698F4A7B913D196CFFF808736ED

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:dl7Fn47Ksll6Hv38tHdzR4d6a70OEzRVizRFNtUWzPnxqwwpbxrpcFgzeH9ihsn9:z7N4tQd6a70OekNtUiEwwhxr+FfdXN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:54309:YRSEAHegJ6BS1AKgVAIIBBYQELgB7BwTAKEOgQLKXKoCDEAbBp4ICIFMCFgCkoCFI5YIGOEfgOoACAGOQA4AhCgAQ6koEEkg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0e0020ffffffffe7
Perceptual Hash:8101719db79fa7c8
Difference Hash:dcd0cb603074400c
Wavelet Hash:0e00003f9f1fffc3
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data