ScanMalware.com

Security Scan Report: sso.microsoft-onedrive.org

Redirected to:
https://www.youtube.com/watch?v=dQw4w9WgXcQ
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f81ec8ee-936e-40d7-bff6-4ab2affb0a59Domain and IP registration (RDAP)/api/v1/rdap/f81ec8ee-936e-40d7-bff6-4ab2affb0a59How often this domain was scanned/api/v1/domain/stats/sso.microsoft-onedrive.orgScan history for this domain/api/v1/domain/history/sso.microsoft-onedrive.org?limit=15
This website contacted 35 IPs in 1 country across 14 domains to perform 197 HTTP transactions. The main domain is microsoft-onedrive.org and was registered 3 weeks ago.

Submitted URL: https://sso.microsoft-onedrive.org

Effective URL:
https://www.youtube.com/watch?v=dQw4w9WgXcQ
Redirected

AI Security Verdict

Low Risk

Confidence: 72%

3
Risk Score

Lookalike Microsoft/OneDrive hostname redirects to YouTube's own rickroll video page. Final page has no credential or payment form and no malicious JS; the redirect is a prank, not phishing. Avoid entering credentials on the entry host.

Risk Factors (2)
Entry hostname 'sso.microsoft-onedrive.org' deceptively combines Microsoft and OneDrive brand strings on a domain Microsoft does not own
Cross-domain redirect from that lookalike host to an unrelated site (consistent with a prank 'rickroll' redirect rather than a legitimate SSO endpoint)
Safety Factors (3)
Redirect terminates on www.youtube.com, the brand owner's own established domain (top 1M ranked)
No credential or payment form on the rendered page; the only form is YouTube's site search
No YARA malware matches, no IDS alerts, no credential exfiltration, no Safe Browsing hit
Domain age information unavailable

Details

Page Title

Rick Astley - Never Gonna Give You Up (Official Video) (4K Remaster) - YouTube

Scan Type

public

Domain Name Analysis

Domain 'sso.microsoft-onedrive.org' uses the non-profit oriented generic top-level domain (.org); it also runs on subdomain 'sso'. The registrable portion 'microsoft-onedrive' spans 18 characters with seven vowels and 10 consonants, along with 1 hyphen. It segments into 3 words: microsoft, one, drive. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sso.microsoft-onedrive.org

Page Load Overview

3.32s
Total Load Time
4.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:12,595 chars
Detector Agreement:100%

Website Classification

Primary Category

forum35% confidence
Type: spa
Method: ml+structural

All Detected Categories

forum
35%
entertainment media
33%
education learning
33%
social_media
25%

Detected Features

Search
Comments
OG: video.other
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2774.207.228.73Atlanta, Georgia, United States
AS63949Akamai Connected Cloud
5142.251.155.4Google · CDNUnited States
AS15169Google LLC
5142.251.14.119Google · CDNUnited States
AS15169Google LLC
5142.251.110.95Google · CDNUnited States
AS15169Google LLC
574.125.111.132Google · CDNUnited States
AS15169Google LLC
5173.194.151.67Google · CDNUnited States
AS15169Google LLC
5142.251.14.94Google · CDNUnited States
AS15169Google LLC
5142.251.110.132Google · CDNUnited States
AS15169Google LLC
574.125.104.231Google · CDNUnited States
AS15169Google LLC
5142.251.156.120Google · CDNUnited States
AS15169Google LLC
19735--

Detected Technologies4

OpenSearch
100%
Open-Graph-Protocolvvideo.other
100%
YouTube
20%
Google AdSense
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T194A507605468387B8547A583EDF1EF3F69E2131BC7C88869BDBAEB9C03ED9441C9E411

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:xskfnkfVkfFkfVkfckfekfdkflkf6kfkkfukfJkfaB3E/gfyXpt3AAmuLiDL1fqz:xdyfnPbNn11b7Ke

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2132934:QyAoqakYPEE4WCgB8JAogcBgNAUCIADNgAAICQWIUjAtFY5sSUgABtCKKMDcnAG6WWJBhCaB9g5QEELTMRCCorBQMOggQQAK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3d3d3d1d1d1d3df9
Perceptual Hash:8a15f114f1b575e4
Difference Hash:f1697979796969e9
Wavelet Hash:1d1d1d1d191d3d39
Color Hash:#931f3c

Other Hashes

Crop Resistant:f1697979796969e9,b1b8f9f9f8b03834,77164656565b4b43

Scan History

Scan history not available

Unable to load historical scan data