Security Scan Report: fivestarbank1com.sharepoint.com

Redirected to:
https://login.microsoftonline.com/1dfc89a7-1c01-4e52-b33b-299ec3ed5d3d...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 14 IPs in 4 countries across 8 domains to perform 24 HTTP transactions. The main domain is sharepoint.com and was registered 28 years ago.

Submitted URL: https://fivestarbank1com.sharepoint.com

Effective URL:
https://login.microsoftonline.com/1dfc89a7-1c01-4e52-b33b-299ec3ed5d3d...
Redirected

The Cisco Umbrella rank of the primary domain is #66 of the top 1 million websitesTop 100 Site

AI Security Verdict

Low Risk

Confidence: 78%

2
Risk Score

Site named 'fivestarbank1com' on SharePoint displays Five Star Bank branding with a sign-in form - a namesquat of the real bank's domain. No malware or IoC hits, but the impersonation of a bank on a non-official host is a concrete risk signal.

Risk Factors (4)
Deceptive hostname imitating a financial institution's domain on a shared hosting platform
Bank brand presented on a domain the bank does not own
Login/credential form presented under impersonated banking branding
Multi-domain redirect chain ending outside the entry domain
Safety Factors (4)
The password form posts to genuine Microsoft infrastructure (login.microsoftonline.com), flagged by the scanner as a legitimate SSO flow rather than credential exfiltration
No threat-intelligence matches, no hunting-rule hits, no IDS alerts, no known phishing kit in the roster
No payment or card fields; no disguised password fields
Page served from an identity-provider sign-in endpoint (login.microsoftonline.com); a relying-party brand and login form here are normal SSO, not impersonation โ€” risk clamped from 8 to 2
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Domain Name Analysis

Domain 'fivestarbank1com.sharepoint.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'fivestarbank1com'. The second-level label 'sharepoint' is 10 characters long containing four vowels alongside six consonants. Word splitting yields two words: share, point. Median word length is 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

4 vive stan BANK Soe EE STAR SANE Sign in someone@example.com [remus of use JN Privacy & cookies)

Page Load Overview

1.65s
Total Load Time
573 KB
Total Size

Language Analysis

Primary Language

๐Ÿ‡บ๐Ÿ‡ธEnglish
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:82 chars
Detector Agreement:88%

All Detected Languages

๐Ÿ‡บ๐Ÿ‡ธen(77%)๐Ÿ‡ฎ๐Ÿ‡นit(15%)๐Ÿ‡ซ๐Ÿ‡ทfr(8%)

Website Classification

Primary Category

finance banking59% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

finance banking
59%
adult content
49%
entertainment media
32%
e-commerce shopping
27%
news media journalism
27%

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1120.190.159.129Azure ยท CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
1013.107.246.44Azure ยท CLOUDUnited States
AS8075Microsoft Corporation
223.207.210.136Akamai ยท CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
113.107.136.10Office365 ยท CLOUDRedmond, Washington, United States
AS8075Microsoft Corporation
140.126.32.138Office365 ยท CLOUDAmsterdam, North Holland, Netherlands
AS8075Microsoft Corporation
140.126.31.130Azure ยท CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
120.184.175.21Azure ยท CLOUDSan Jose, California, United States
AS8075Microsoft Corporation
113.107.138.10Azure ยท CLOUDRedmond, Washington, United States
AS8075Microsoft Corporation
140.126.31.128Azure ยท CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
123.207.210.132Akamai ยท CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
2414--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1ACA37DEABEA71D3782864475B6B97D026E3A6903888CDD64F04CCC882FFB64D8133557

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:FeB8GLG20RbtuzbJThbW/RoTIZ9Tjuokmap5vPoMLufO0OI9idQuC:UB8DbuzlThwRva/AofC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:101085:gTCEZlWpgEKAJDAOIEldhCIoAZcYJkfgEgqCYYFEHGRCY4oUB4MgY8AC1pwyQZBAYYhoAAtCoQNhCc0uQgmBQEkQHkAisjBA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000181818180000
Perceptual Hash:dcd923665c9989cc
Difference Hash:100db2b2b3b20c33
Wavelet Hash:ffff3f1818380000
Color Hash:07000030000

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data