Security Scan: OneDrive

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/dbeb781b-0c72-4396-9a2a-a0af1e05ecd0 Domain and IP registration (RDAP)/api/v1/rdap/dbeb781b-0c72-4396-9a2a-a0af1e05ecd0How often this domain was scanned/api/v1/domain/stats/projectshare.ngrok.pro Scan history for this domain/api/v1/domain/history/projectshare.ngrok.pro?limit=15

This website contacted 6 IPs in 2 countries across 3 domains to perform 6 HTTP transactions. The main domain is ngrok.pro and was registered 4 years 3 months ago.

Submitted URL: https://projectshare.ngrok.pro/OneDrive.html

AI Security Verdict

Low Risk

Confidence: 90%

Risk Score

Fake Microsoft OneDrive page hosted on an ngrok tunnel, impersonating Microsoft to steal credentials via a verification lure. Avoid interaction.

Risk Factors (4)

Brand impersonation of Microsoft OneDrive on a non-official domain

Deceptive use of a free tunneling service to host a fake login page

Psychological lure ('protected document', 'verify your identity') to trick users into clicking

Unranked domain with no legitimate reputation

Safety Factors (3)

Root domain ngrok.pro has been registered for 1565 days (but subdomain is user-controlled)

No credential or payment forms are present directly on this page (the phishing likely occurs after the redirect)

Page presents itself as a developer clone/tutorial build of a well-known product and offers no sign-in, wallet, payment or download step — a practice project, not an impersonation attempt

Domain age information unavailable

Details

Page Title

OneDrive

Scan Type

public

Favicon Hash

MMH3: -1275226814

MD5: 6eb4a43cb64c97f76562af703893c8fd

Domain Name Analysis

The domain 'projectshare.ngrok.pro' uses the .pro top-level domain; it also runs on subdomain 'projectshare'. Count 5 characters in 'ngrok' split between one vowel and four consonants. It segments into two words: ng, rok. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Oarmip O My files ‘D Recent 28 Shared TW Recycle bin Shared file ie) Name Modified Size ie) [R, Project Outline 10/26/2026 a 12.08MB

Page Load Overview

0.51s

Total Load Time

245 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:537 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical84% confidence

Type: static

Method: ml+structural

All Detected Categories

documentation technical

84%

download file sharing

82%

technology software

81%

adult content

65%

government public service

65%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	63.177.123.104Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
1	3.75.159.249Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
1	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.20.95Google · CDN	United States	AS15169Google LLC
1	63.178.130.85Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
1	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	6	-	-