Security Scan Report: economic-poet-b50.notion.site

Submitted: Completed: publiccompleted
This website contacted 8 IPs in 1 country across 5 domains to perform 881 HTTP transactions. The main domain is notion.site and was registered 5 years ago.

Submitted URL: https://economic-poet-b50.notion.site/Microsoft-Office-365-7782e9e7e96e4bcd8a7a528b7505a1c3

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Notion page wearing Microsoft Office 365 / OneDrive branding with an Italian 'shared PDF, click to view' lure on a non-Microsoft host — a brand-impersonation phishing hop; no credential form on this page itself.

Risk Factors (4)
Impersonation of Microsoft Office 365 / OneDrive branding on a domain unrelated to Microsoft
Phishing pretext of a shared PDF document requiring a click-through to view
Brand-mismatched content on a free Notion hosting subdomain
Multiple redirects in the delivery chain
Domain age information unavailable

Details

Page Title

Microsoft Office 365

Scan Type

public

Domain Name Analysis

Within the .site top-level domain, 'economic-poet-b50.notion.site' is registered; it also runs on subdomain 'economic-poet-b50'. Its registrable label 'notion' stretches across 6 characters containing three vowels alongside three consonants. Breaking it apart gives 1 word: notion. No strong language cues emerged from the frequency lists.

Screenshot

@ Microsoft Office 365 Q & ++ [eateries sai Miicrosort Microsoft Office 365 @ Created By @® Roberta Silva Un documento PDF é stato condiviso con te su OneDrive for Business. Per visualizzare, far...

Page Load Overview

90.20s
Total Load Time
10.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:446 chars
Detector Agreement:75%

Website Classification

Primary Category

download file sharing67% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

download file sharing
67%
technology software
46%
documentation technical
42%
corporate business
28%
adult content
25%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
111208.103.161.32United States
AS33191Notion Labs, Inc.
11044.215.234.239Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
110208.103.161.2United States
AS33191Notion Labs, Inc.
11034.160.81.0Google · CDNKansas City, Missouri, United States
AS396982Google LLC
110208.103.161.33United States
AS33191Notion Labs, Inc.
11034.228.45.57Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
11018.214.252.60Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
110208.103.161.1United States
AS33191Notion Labs, Inc.
8818--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D0331A309A10306D4627A690F5A1A34E7227C35BDB1698E877B913D196CFBF808736ED

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:juws6l7Hv38tndzR4d6a70OEzRVizRFNtUWzPXxqwwpLxrpcF2ze39ihsnXNzRTR:iQd6a70OekNtUi0wwxxr+F5NXN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:51834:ZGiQABJ0hakUAAObggFYAksICAkSAGGEwVBYBAXLEgQSjUQYSyrJgkHwJqsL4CBOgZBzLBUJFLh0BAMkyApyKQIONjQDkjiW

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0e0020ffffffffe7
Perceptual Hash:8101719db79fa7c8
Difference Hash:dcd0cb603074400c
Wavelet Hash:0e00003f9f1fffc3
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data