Phishing detection: onedrive-yujdgbdvd.myftp.biz

Microsoft
https://onedrive-yujdgbdvd.myftp.biz Access site
Screenshot
Screenshot of onedrive-yujdgbdvd.myftp.biz
Investigate
Domain onedrive-yujdgbdvd.myftp.biz0 CT hosts on apex
URL https://onedrive-yujdgbdvd.myftp.biz
Cert Let's Encrypt
Phishunt analysis Beta
30 low suspicionheuristic risk score · not a probability
Keyword matchHigh entropyurlscan.io
19 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting

Site impersonates Microsoft OneDrive to harvest credentials. Uses a No-IP dynamic DNS subdomain at myftp.biz with a randomized label, resolving to a Bulgarian server at SERVA ONE LTD. Confirmed malicious by urlscan and clustered with other OneDrive lures on the same IP.

urlscan.ioKeyword matchShared IP cluster
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-24 · confidence 78%
Domain & Network
Whois
Network
Country BulgariaBulgaria
Hosting SERVA ONE LTD
ASN AS209260
TLS Cert Let's Encrypt
External detection urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Report this phishing

Tracked from 2026-07-24 00:51 UTC  ·  Last refreshed 2026-07-24 01:30 UTC