Security Scan: Microsoft User shared a document with you

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d529f1fe-a612-434d-aefd-064c53e62bbe Domain and IP registration (RDAP)/api/v1/rdap/d529f1fe-a612-434d-aefd-064c53e62bbe Certificate Transparency/api/v1/ct/mail-drive-oj1g.p-2f66mze8.workers.dev How often this domain was scanned/api/v1/domain/stats/mail-drive-oj1g.p-2f66mze8.workers.dev Scan history for this domain/api/v1/domain/history/mail-drive-oj1g.p-2f66mze8.workers.dev?limit=15

This website contacted 4 IPs in 1 country across 2 domains to perform 7 HTTP transactions. The main domain is mail-drive-oj1g.p-2f66mze8.workers.dev and was registered 1 month ago.

Submitted URL: https://mail-drive-oj1g.p-2f66mze8.workers.dev/l/GfcQaj4x9c4/

AI Security Verdict

Confirmed Scam

Confidence: 90%

Risk Score

Microsoft-branded phishing page on a free workers.dev subdomain; Google Safe Browsing flags Social Engineering. It uses a fake shared-document lure and clipboard verification-code trick to hijack Microsoft authentication.

Risk Factors

Impersonation of Microsoft brand on an unrelated domain

Google Safe Browsing Social Engineering (phishing) detection

Clipboard 'copy code / paste to authenticate' social-engineering technique

Fake shared-document / OneDrive access lure

Free anonymous hosting subdomain on workers.dev

Domain age information unavailable

Details

Page Title

Microsoft User shared a document with you

Scan Type

public

Favicon Hash

MMH3: 318374874

MD5: d835c7465ce7a97006d448b7404add69

Domain Name Analysis

The domain name 'mail-drive-oj1g.p-2f66mze8.workers.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'mail-drive-oj1g.p-2f66mze8'. The second-level label 'workers' is 7 characters long holding 2 vowels versus five consonants. Breaking it apart gives 1 word: workers. Average segment length settles at 7 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.12s

Total Load Time

15 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:593 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software52% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

52%

documentation technical

28%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	104.21.37.127Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	172.67.208.57Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	4	-	-