Security Scan: Sharepoint

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f5721004-8c98-4aed-a721-0292d1af45f1 Domain and IP registration (RDAP)/api/v1/rdap/f5721004-8c98-4aed-a721-0292d1af45f1How often this domain was scanned/api/v1/domain/stats/f005.backblazeb2.com Scan history for this domain/api/v1/domain/history/f005.backblazeb2.com?limit=15

This website contacted 3 IPs in 1 country across 4 domains to perform 6 HTTP transactions. The main domain is backblazeb2.com and was registered 10 years ago.

Submitted URL: https://f005.backblazeb2.com/file/veiwdox/index.html#[email protected]

The Cisco Umbrella rank of the primary domain is #13,278 of the top 1 million websites

AI Security Verdict

Moderate Risk

Confidence: 96%

Risk Score

Fake Microsoft SharePoint sign-in page hosted on Backblaze B2 that impersonates Microsoft and harvests passwords, personalized with a victim email token in the URL. Do not enter credentials.

Risk Factors (5)

Brand impersonation of Microsoft SharePoint on an unrelated cloud-storage host

Credential-harvesting login form with multiple password fields and hidden user/passwd2 fields

Victim email address injected into the URL fragment and echoed on screen

Use of Microsoft login CDN assets to fake legitimacy

Page hosted in a B2 bucket path (/file/veiwdox/) rather than a Microsoft domain

Safety Factors (3)

Hosting domain (backblazeb2.com) is long-established and is a legitimate cloud storage provider, but it is being abused here

No hunting rule malware patterns, no network IDS alerts, and no cross-origin credential exfiltration detected

Established domain (3765 days old) with no strong malicious indicators — risk clamped from 10 to 5

Domain age information unavailable

Details

Page Title

Sharepoint

Scan Type

public

Favicon Hash

MMH3: -1898503633

MD5: 7cd63f508e42dec6f17c9858571804ac

Domain Name Analysis

The domain name 'f005.backblazeb2.com' uses the commercial generic top-level domain (.com) with subdomain 'f005'. The second-level label 'backblazeb2' is 11 characters long with three vowels and 7 consonants; bonus characters include 1 digit. Splitting it apart reveals four words: back, blaze, b, 2. Median word length comes out to 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

‘Terms of Microsoft « alio@aBc89273b326306bedee27376dc4e9270cf7.net Enter password (_) Keep me signed in Forgot password!

Page Load Overview

1.14s

Total Load Time

78 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:345 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software81% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

81%

documentation technical

30%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	149.137.136.16	United States	AS40401Backblaze Inc
2	148.139.167.243	United States	AS16839SERVICENOW, INC.
2	13.107.246.44Azure · CLOUD	United States	AS8075Microsoft Corporation
6	3	-	-