Security Scan Report: netorg679262-my.sharepoint.com

Redirected to:
https://netorg679262-my.sharepoint.com/personal/brandi_lpckc_com/_layo...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 17 IPs in 3 countries across 12 domains to perform 104 HTTP transactions. The main domain is sharepoint.com and was registered 28 years ago.

Submitted URL: https://netorg679262-my.sharepoint.com/:f:/g/personal/brandi_lpckc_com/EsGlowtg98dPjzEpiiJUyrgBuJ81B6oGiV_UfDSRvKFBIQ?e=qi2KND

Effective URL:
https://netorg679262-my.sharepoint.com/personal/brandi_lpckc_com/_layo...
Redirected

The Cisco Umbrella rank of the primary domain is #66 of the top 1 million websitesTop 100 Site

AI Security Verdict

Low Risk

Confidence: 72%

2
Risk Score

Authentic Microsoft OneDrive page with no forms, malware or threat-intel hits, but the 'review-payment' folder and 'SEE PAYMENT BELOW' file names match document-sharing payment-fraud lures — verify the sender out-of-band before opening.

Risk Factors (2)
File/folder naming ('review-payment', 'SEE PAYMENT BELOW', 'ACCESS HERE TO REVIEW DOCU...') is a common social-engineering lure pattern for payment-change/BEC fraud delivered via file-sharing links
Tenant account ([email protected]) sharing a payment-related folder is unverifiable from the page; sharing source cannot be confirmed as the legitimate owner
Safety Factors (4)
Hosted on authentic Microsoft SharePoint/OneDrive infrastructure with top-100 domain ranking
No forms, no password or payment fields, no credential or payment capture on the page
No Indicators of Compromise, hunting rule, IDS, or Safe-Browsing findings
All external resources are first-party Microsoft endpoints
Domain age information unavailable

Details

Page Title

review-payment - OneDrive

Scan Type

public

Domain Name Analysis

Domain 'netorg679262-my.sharepoint.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'netorg679262-my'. The core label 'sharepoint' covers 10 characters split between 4 vowels and 6 consonants. Tokenizing the label suggests two words: share, point. Average segment length settles at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

OneDrive g ? v Details sb Download ¥ Sort ©) Brandi Reynolds >» payment > review-payment @ 23 OQ Name v Modified® » ModifiedBy » File size v Sharing ~ Activity c: 'S) SEE PAYMENT BELOW PE duly 23...

Page Load Overview

10.84s
Total Load Time
2.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-us
Text Length:432 chars
Detector Agreement:100%

Website Classification

Primary Category

download file sharing68% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

download file sharing
68%
documentation technical
42%
finance banking
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
813.107.138.10Office365 · CLOUDRedmond, Washington, United States
AS8075Microsoft Corporation
613.107.136.10Office365 · CLOUDRedmond, Washington, United States
AS8075Microsoft Corporation
623.207.210.73Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
6184.31.86.246Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
623.207.210.68Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
623.207.210.87Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
623.207.210.76Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
674.151.238.101Azure · CLOUDDulles, Virginia, United States
AS8075Microsoft Corporation
623.207.210.134Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
613.107.6.163Azure · CLOUDUnited States
AS8068Microsoft Corporation
10417--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T181257C249210303DF62799BA9284BAAD7F3C913BE9128FD6FE6D935941D21C72073637

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24576:QeWO1TIPiUgYBdJ+pzaombvmySLqduAHN+pzCoQgfTHo2yQKvg2gHa3Z6rmqbgqM:QeWO1TIPiUgYBdJ+pzaombvmySLqduAF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1008422:hCgFGqxVYwKMQQ4kFctB6kY3BAWFMTIIOl6A8AjtAQADEPREkpASIAAMoAgMgJD2EIAAQQoaOAwxqjRUqsYEGIceQC6SE/iN

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00001fffffffffff
Perceptual Hash:951e0e48c9c9f5b5
Difference Hash:e0acac8080808080
Wavelet Hash:000006fefefefe42
Color Hash:07000038000

Other Hashes

Crop Resistant:e0acac8080808080

Scan History

Scan history not available

Unable to load historical scan data