Security Scan Report: biesse.en-onedrive.com

Redirected to:
https://m365679926-shared-lists-document-review-signshared.shared-fold...
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 3 domains to perform 7 HTTP transactions. The main domain is en-onedrive.com and was registered 1 week ago.

Submitted URL: https://biesse.en-onedrive.com

Effective URL:
https://m365679926-shared-lists-document-review-signshared.shared-fold...
Redirected

AI Security Verdict

High Risk

Confidence: 86%

8
Risk Score

Cloudflare flags suspected phishing; a OneDrive-lookalike domain redirects to a deceptive workers.dev host mimicking Microsoft 365 shared-document access. No credential form captured, but avoid interaction.

Risk Factors (5)
Deceptive hostname impersonates Microsoft 365/SharePoint/OneDrive shared-document access on an unrelated workers.dev domain.
Cloudflare reports the site as suspected phishing.
Redirect to free Cloudflare Workers hosting with a long, crafted subdomain typical of phishing lures.
Scanner received a Cloudflare phishing block/challenge while a residential client received a bare redirect, suggesting possible bot evasion.
Page presents no legitimate visible content beyond a redirect notice.
Domain age information unavailable

Details

Page Title

Redirect

Scan Type

public

Domain Name Analysis

The domain name 'biesse.en-onedrive.com' uses the commercial generic top-level domain (.com) and includes subdomain 'biesse'. The core label 'en-onedrive' covers 11 characters with 5 vowels and 5 consonants; bonus characters include 1 hyphen. Word splitting yields 3 words: en, one, drive. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://biesse.en-onedrive.com

Page Load Overview

0.54s
Total Load Time
37 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:8 chars
Detector Agreement:0%

Website Classification

Primary Category

phishing scam97% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

phishing scam
97%
technology software
63%
documentation technical
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4104.21.89.51Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.21.69.134Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.67.208.245Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
74--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13A1121EE38A751082A93401CDA5B662CB04F76770C84C981BDB503246F9172FF6971ED

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:hRhT+5vTe5gdkbesWQMvDV5GHzSeLpCAxKj:Thg7e6JsWQMh5sSeLIAa

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1011:AAEACIAAAAAABHAAAAAQAAAAAAQIBBAAAAAIAAAAAAAAAAAAAAgAQAAAAAAABAAAAAAAAAAAAAACABAAAAAAIAigAAAAIAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff8787ffc7ffffff
Perceptual Hash:b83898c3c3c7ce3c
Difference Hash:203c38000c000000
Wavelet Hash:9f879fc3003c3c3c
Color Hash:#2d8649

Other Hashes

Crop Resistant:203c38000c000000

Scan History

Scan history not available

Unable to load historical scan data