ScanMalware.com

Security Scan Report: mimecrosoft-onlook.sbs

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/bb482587-dfb6-48ee-9b6a-d19466eec6e0Domain and IP registration (RDAP)/api/v1/rdap/bb482587-dfb6-48ee-9b6a-d19466eec6e0How often this domain was scanned/api/v1/domain/stats/mimecrosoft-onlook.sbsScan history for this domain/api/v1/domain/history/mimecrosoft-onlook.sbs?limit=15
This website contacted 2 IPs in 1 country across 1 domain to perform 5 HTTP transactions. The main domain is mimecrosoft-onlook.sbs and was registered 11 months ago.

Submitted URL: https://mimecrosoft-onlook.sbs

AI Security Verdict

High Risk

Confidence: 92%

9
Risk Score

Typosquatted fake 'Mimecrosoft Onlook' document portal on a domain flagged by two feeds as a stealer. Brand impersonation plus confirmed malware intelligence; do not open links or enter data.

Risk Factors (4)
Multi-source corroborated stealer-malware threat-intel match on the primary domain
Typosquatted hostname impersonating a major brand on an unrelated TLD
Document-sharing lure with no actual document functionality, consistent with a lure/redirect staging page
No reputation, no organizational transparency, single-purpose landing page
Domain age information unavailable

Details

Page Title

Mimecrosoft Onlook — Document Portal

Scan Type

public

Domain Name Analysis

The domain 'mimecrosoft-onlook.sbs' uses the .sbs top-level domain while skipping any subdomain. Count 18 characters in 'mimecrosoft-onlook' split between seven vowels and ten consonants, along with one hyphen. Tokenizing the label suggests 5 words: mime, cro, soft, on, look. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Mimecrosoft Onlook Secure document sharing and collaboration portal Ifyou have a document link, please use the full URL provided to you.

Page Load Overview

0.86s
Total Load Time
15 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:223 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software28% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
52--

Detected Technologies3

Cloudflare Bot Management
55%
HTTP/3
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1165194B596065128E5A781553075E39835348293BB07A04CD5DDE52CC18DFC344BBEEC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:n+8SFSdK8m/Cpy/yP2SdYiGWrGWEkSTw2wptI8Id65OuQ:n+8SO9mg9OAaEnx/IGQ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2662:ghAGAAAUQAAAAAIQCAAEACACC0QAAICAYAEJEAAAADIAAAAYAAgAAJQGAIYIAIAAAFAAAAFAAgQgARAAGIAAAgIEABAACABI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7e5e7ffffff
Perceptual Hash:b333cccc33338ccc
Difference Hash:0000080c0c000000
Wavelet Hash:cfcfcbc3c4c4c0c0
Color Hash:N/A

Other Hashes

Crop Resistant:0000080c0c000000

Scan History

Scan history not available

Unable to load historical scan data