Security Scan Report: thefork.file.force.com

Redirected to: https://login.microsoftonline.com/cf3dc8a2-b7cc-4452-848f-cb570a56cfbf/saml2?SAMLRequest=hZNdc6IwFIb%2FCpP7KIKgMNUOIlatKEVwrTcdDEHjQiJJ8OvXL6PtTHcvumcmF2fOyfuek3ny9HwpcuWEuSCM9kCroQIFU8RSQnc9EEcj2AXP%2FSeRFLl2tJ1K7mmIywoLqdQXqbAflR6oOLVZIoiwaVJgYUtkLx1%2FZmsN1T5yJhliOVAcITCXtZXLqKgKzJeYnwjCcTjrgb2UR2E3m3KPM8Z%2FN4prQyQ5FnWCcAOx4lmwnqoOY%2FURs6w8AGVYz0JoIu%2Fzf0nkbEdooyCIM8EyyWhO6F2iiTI9Rd1Eg9sOQrDdNjTYbXcziLZGR00ME2XbrHlfCiiTYQ98aK5Tx%2BYajJKX2B86539PXR04zL%2Bew9isCF63PtCZTPVb10%2FIejBawU24TqeRdSQlzBbj1%2FjQzo5h%2BbHUWqHjpW%2FeLKxoNPWjkN%2BcgMV6uhq0DH3om4f525ytiUuD5CCowarAXd%2BuQzMQgW8W8h1vTK47Pr1dJhPpD%2FT5yZXz19fhqtzsSTv1%2Fa6sNBUtTsj0Imm9c%2F%2FsYePir1beyxJep0YJrYUX7yaWta9MTtO2dcw7Xg759ff4uIFqFh8Qm7zQ8WiWXmZasvUInPJw7bjnX%2F5oxDqeO1tuS6GedvVrCVHhCRUyobIHNFUzodqCWidSLdvo2qrRMHRrA5Tgk4YBoQ%2FKfkJn%2B2gS9jiKAhgslhFQVl%2B01g3gk0377s6%2FQ%2FmzcPJFIuj%2Fl7un5neP%2Fmf693fo%2FwE%3D&RelayState=%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=IsSx1Ct%2BdWI4M4ZrAsSaxQnNiUrc4eJ6O3eZ%2FevxIiIygLZASjEaadmM5tnRpW1e3PRWMMMnPZBYlpH7OR8u%2BkURXU1hrLrtUxMEhnG%2Fc6OOLhYUMYew3fV587BGO1j6v41k%2BgwLRw62iVuup9Ckrs91TafpPr7DUG%2FfKTFuuqR73z2USOZx%2BGyByMSAs2Z%2BnCkDxsIebMYzixD4MpuNDbOWcD6tl5u%2FEfwvd7tjJKu9odvc7OgjqIu16DP%2BR5A%2FPQUVEDtMiXSsF0MO8R3%2F%2FVL%2Bc9nAhN641qadkpWiTT6Kujhxo%2F1%2FEHJ1Q5N0nsWVAFPFGgGpacJRO9BTqyMkGA%3D%3D&sso_reload=true

Submitted: Jan 27, 2026, 9:58:02 AMCompleted: Jan 27, 2026, 9:59:12 AMpubliccompleted
Loading additional data...

Summary

This website contacted 6 IPs in 3 countries across 7 domains to perform 1 HTTP transaction. The main domain is login.microsoftonline.com and was registered NaN years ago.

Submitted URL: https://thefork.file.force.com

Effective URL: https://login.microsoftonline.com/cf3dc8a2-b7cc-4452-848f-cb570a56cfbf/saml2?SAMLRequest=hZNdc6IwFIb%2FCpP7KIKgMNUOIlatKEVwrTcdDEHjQiJJ8OvXL6PtTHcvumcmF2fOyfuek3ny9HwpcuWEuSCM9kCroQIFU8RSQnc9EEcj2AXP%2FSeRFLl2tJ1K7mmIywoLqdQXqbAflR6oOLVZIoiwaVJgYUtkLx1%2FZmsN1T5yJhliOVAcITCXtZXLqKgKzJeYnwjCcTjrgb2UR2E3m3KPM8Z%2FN4prQyQ5FnWCcAOx4lmwnqoOY%2FURs6w8AGVYz0JoIu%2Fzf0nkbEdooyCIM8EyyWhO6F2iiTI9Rd1Eg9sOQrDdNjTYbXcziLZGR00ME2XbrHlfCiiTYQ98aK5Tx%2BYajJKX2B86539PXR04zL%2Bew9isCF63PtCZTPVb10%2FIejBawU24TqeRdSQlzBbj1%2FjQzo5h%2BbHUWqHjpW%2FeLKxoNPWjkN%2BcgMV6uhq0DH3om4f525ytiUuD5CCowarAXd%2BuQzMQgW8W8h1vTK47Pr1dJhPpD%2FT5yZXz19fhqtzsSTv1%2Fa6sNBUtTsj0Imm9c%2F%2FsYePir1beyxJep0YJrYUX7yaWta9MTtO2dcw7Xg759ff4uIFqFh8Qm7zQ8WiWXmZasvUInPJw7bjnX%2F5oxDqeO1tuS6GedvVrCVHhCRUyobIHNFUzodqCWidSLdvo2qrRMHRrA5Tgk4YBoQ%2FKfkJn%2B2gS9jiKAhgslhFQVl%2B01g3gk0377s6%2FQ%2FmzcPJFIuj%2Fl7un5neP%2Fmf693fo%2FwE%3D&RelayState=%2F&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=IsSx1Ct%2BdWI4M4ZrAsSaxQnNiUrc4eJ6O3eZ%2FevxIiIygLZASjEaadmM5tnRpW1e3PRWMMMnPZBYlpH7OR8u%2BkURXU1hrLrtUxMEhnG%2Fc6OOLhYUMYew3fV587BGO1j6v41k%2BgwLRw62iVuup9Ckrs91TafpPr7DUG%2FfKTFuuqR73z2USOZx%2BGyByMSAs2Z%2BnCkDxsIebMYzixD4MpuNDbOWcD6tl5u%2FEfwvd7tjJKu9odvc7OgjqIu16DP%2BR5A%2FPQUVEDtMiXSsF0MO8R3%2F%2FVL%2Bc9nAhN641qadkpWiTT6Kujhxo%2F1%2FEHJ1Q5N0nsWVAFPFGgGpacJRO9BTqyMkGA%3D%3D&sso_reload=trueRedirected

The Cisco Umbrella rank of the primary domain is #1,491 of the top 1 million websitesTop 10K Site

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Phishing page impersonating TripAdvisor; do not enter credentials.

Risk Factors
Brand impersonation on an unusual domain
Credential harvesting login form
Suspicious redirect to a Microsoft login page
Phishing‑oriented copy
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

Domain 'thefork.file.force.com' uses the commercial generic top-level domain (.com) and includes subdomain 'thefork.file'. The core label 'force' covers 5 characters containing 2 vowels alongside three consonants. Splitting it apart reveals 1 word: force. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://thefork.file.force.com

Page Load Overview

1.50s
Total Load Time
19
HTTP Requests
7
Domains
912 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:177 chars
Detector Agreement:67%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form
Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
413.107.246.44United States
AS8075Microsoft Corporation
340.126.31.0France
323.200.24.175Berlin, State of Berlin, Germany
AS20940Akamai International B.V.
340.126.31.3United StatesUnknown
3145.224.212.224UnknownUnknown
3145.224.212.225Paris, Île-de-France, France
AS16509Amazon.com, Inc.
196--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12D834AD67EB71936C38A81B9B5B96D02AA3B5D03894CCD60F19CC9842FFB64D9037613

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:jpQYjQY88GLGG9QYKQQY2c2ozTEyqU6MVnvnaloMPt3EyMRiHC:WVf8fvJI2XyS2sC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:81329:VIIYjC4IBmeAVUlkAyugGoBnJM0B1gJqChLBCQvOapBAEEUQgMGJKRKCoYYgssAQA4esShaAgIgkUZhdAAzOEA6S3lZDgB8U

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:001f7fffff180000
Perceptual Hash:98cd36c3ac13d999
Difference Hash:dcf0b2b2b2b0e8ac
Wavelet Hash:043f7fffff180000
Color Hash:#be87c5

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data