office.folder-onedrive-live.com

Microsoft

https://office.folder-onedrive-live.com Access site

Screenshot

Investigate

Domain office.folder-onedrive-live.com15 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

IP 18.213.129.99

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://office.folder-onedrive-live.com

urlscan

Wayback

archive.today

Cert YE1

crt.sh

Censys

Google CT

Phishunt analysis Beta

32 medium suspicion suspiciousheuristic risk score · not a probability

Why?

+6.1 Google Safe Browsing
+5.3 Keyword match
+5.1 Site cluster
+4.0 Young domain
+3.4 Shared IP cluster
+2.6 ASN reputation
+1.1 No CSP header
+1.1 No HSTS header
+0.9 Young certificate
+0.9 No registrar lock
+0.6 Long domain
+0.3 Free CA
+0.2 Hyphens
+0.2 Suspicious TLD
+0.1 Deep subdomain

18 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Microsoft/OneDrive-themed phishing on a day-old hyphenated domain with an office subdomain, hosted on Amazon. Flagged by Google Safe Browsing as social engineering and reuses resources from known phishing, likely harvesting Microsoft 365 credentials.

Google Safe BrowsingYoung domainShared page assets

AI-generated from stored detector signals - the AI never visited the site. · 2026-10-30 · confidence 85%

Domain & Network

Whois

Registrar Cloudflare, Inc.

Network

IP 18.213.129.99 AWS EC2

Country