Security Scan Report: sharivorcanas.netlify.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 3 domains to perform 42 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://sharivorcanas.netlify.app/a

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Fake Microsoft OneDrive document-sharing page on a netlify.app subdomain that harvests email and password and can forward them to a Telegram bot. Brand impersonation plus credential form and phishing threat-intel — confirmed scam.

Risk Factors (5)
Brand impersonation of Microsoft OneDrive on a non-Microsoft hosting subdomain
Password capture form disguised as an identity confirmation for a 'secured document'
Telegram bot token embedded in the site's own script — credential exfiltration capability
Single-source phishing threat-intel match on the primary domain
High-severity IDS alert for hex-obfuscated script-tag encoding
Domain age information unavailable

Details

Page Title

OneDrive File Cloud

Scan Type

public

Domain Name Analysis

The domain 'sharivorcanas.netlify.app' uses the application-focused generic top-level domain (.app), featuring subdomain 'sharivorcanas'. The registrable portion 'netlify' spans 7 characters containing 2 vowels alongside five consonants. Tokenizing the label suggests three words: net, li, fy. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

&s OneDrive for Business yp All Files Shared 501MB/25068 Used Cy ges 1606825068 Used Ca File Requests 2068/2068 Used Ey Deleted rites 7068/25068 Used 26068 /1TB Used 26% OneDrive File Cloud S...

Page Load Overview

2.05s
Total Load Time
1.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:672 chars
Detector Agreement:67%

Website Classification

Primary Category

download file sharing96% confidence
Type: webapp
Method: ml+structural

All Detected Categories

download file sharing
96%
documentation technical
78%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1063.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
835.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
8142.251.20.95Google · CDNUnited States
AS15169Google LLC
8142.251.13.94Google · CDNUnited States
AS15169Google LLC
8142.251.110.95Google · CDNUnited States
AS15169Google LLC
425--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19B82FA32E408192F41C746DEB838AFDD54A3C616FE4F940851FC83A95BD6D9AAC173E8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:+a5JA59yteokAeYexeMeRMTpCuednJe662G/bQtnjcIlPAZ9lAAWZwG1:g9yt4TEb+QtnjcIlPAZ9lAZT

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:17625:hUpnDg4GqixkRAaBgCqRgEEgABEZbUicZpi6AhDSgsYkHCRAGEUFgSMxYAgAAB5AARRMBFxS4AKR2hwUDERw7IgcMgWNIgSB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3f1279f0c0c0c0c0
Perceptual Hash:dd0595f7a2a2a3a2
Difference Hash:e022d10000000000
Wavelet Hash:3f185bfbc0c0c0c0
Color Hash:N/A

Other Hashes

Crop Resistant:e022d10000000000

Scan History

Scan history not available

Unable to load historical scan data