onedrive-yhnncssdcs.ddnsking.com

Microsoft

https://onedrive-yhnncssdcs.ddnsking.com Access site

Screenshot

Investigate

Domain onedrive-yhnncssdcs.ddnsking.com0 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

IP 87.229.34.97

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://onedrive-yhnncssdcs.ddnsking.com

urlscan

Wayback

archive.today

Cert Let's Encrypt

crt.sh

Censys

Google CT

Phishunt analysis Beta

31 low suspicionheuristic risk score · not a probability

Keyword matchLong domainurlscan.io

20 signals fired · detector v2.0.0

AI analysis AIBeta

Credential harvesting

Site impersonates Microsoft OneDrive to harvest credentials, hosted on a No-IP dynamic DNS subdomain in Bulgaria on SERVA ONE LTD infrastructure. Flagged malicious by urlscan and achieving maximum keyword classification score, it uses a randomized subdomain to evade pattern detection.

Keyword matchurlscan.ioCountry mismatch

AI-generated from stored detector signals - the AI never visited the site. · 2026-07-23 · confidence 75%

Domain & Network

Whois

Registrar No-IP Technologies, LLC

Network

IP 87.229.34.97

Country