Phishing detection: onedriveauthorization.pages.dev
Microsoft Screenshot
Investigate
Domain
onedriveauthorization.pages.dev1 CT host on apex
urlscan
VirusTotal
Whois
IP
172.66.44.238
ipinfo
Greynoise
URL
https://onedriveauthorization.pages.dev
Phishunt analysis Beta
21
low suspicionheuristic risk score · not a probability
Keyword matchLong domainPaaS host
13 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting
Impersonates Microsoft OneDrive via a keyword-laden subdomain on Cloudflare Pages suggesting an authorization flow. Lacks security headers and uses a freshly issued free certificate. Flagged malicious by urlscan; no official Microsoft infrastructure is involved.
Keyword matchPaaS hostLong domain
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-23 · confidence 65%
Domain & Network
Whois
Registrar
CloudFlare, Inc.
Network
Country
United States
United States
Hosting
Cloudflare, Inc.
ASN
AS13335
TLS Cert
Let's Encrypt
External detection
urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Report this phishing
Brand owner
Microsoft
Submit to blocklists