ChainPatrol
Web-Check 
SOCRadar 
LeakIX 
Domain security and threat intelligence
ks-gov[.]us-onedrive[.]com
“Sharepoint Secure Panel”
Threat verdict
Critical
90/100 evidence score
Availability
Unverified
Current reachability is unverified
Risk signals
Stored blocklist matches: 2
Young domain: 2 days old
Evidence Summary
CRITICAL
ks-gov.us-onedrive.com is a subdomain of us-onedrive.com. PhishDestroy first observed the hostname on Sep 5, 2026. The captured page title is “Sharepoint Secure Panel”. Current evidence score: 90/100 (critical).
Positive findings are stored from 4 sources: OpenPhish, Phishunt, Google Safe Browsing, and Cloudflare Radar. OpenPhish and Phishunt listed the hostname in the separate external-blocklist snapshot on Sep 5, 2026 at 06:20 UTC. Google Safe Browsing flagged the domain: Social Engineering on Sep 5, 2026 at 06:41 UTC. Cloudflare Radar classified the hostname as malicious and placed it in the phishing category; its verdict timestamp was not retained. Non-positive and contextual checks: URLScan completed without a malicious verdict (score 0) on Sep 5, 2026 at 05:08 UTC. No completed VirusTotal result is available.
The collector marked the hostname reachable on Sep 5, 2026 at 01:11 UTC, but did not retain the HTTP response code. Registration records for the registrable domain us-onedrive.com list NameSilo, LLC as the registrar and Sep 2, 2026 as the creation date. Registration preceded first observation by 2 days. At collection time, the hostname resolved to 172.67.151.133 on AS13335 (Cloudflare, Inc.). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. DOM analysis on Sep 5, 2026 at 02:22 UTC returned 90/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Google Trust Services as the certificate issuer with validity through Dec 3, 2026; checked Sep 5, 2026 at 04:02 UTC.
The content indicators and 4 positive source findings support the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.
VirusTotal
Scanning...
CF Radar
Malicious
URLScan
TLS Certificate
Google Trust Services
Age
2d Brand New!
Observed status
Unverified
DestroyList
Listed
Data coverage
VirusTotal
scan in progress
URLQuery
not checked
PhishStats
not checked
OTX
no community references
CF Radar
provider verdict: malicious
URLScan capture
stored report
URLScan verdict
Analysis completed
DNS blocks
not checked
TLS
valid certificate, 89d
WHOIS
2d old
Screenshot
2 captures · 2 sources
Redirect chain
not probed
Network Security Intelligence Registrar context
Registrar context
NameSilo
Stored registration data identifies NameSilo as the registrar. PhishDestroy maintains separate registrar investigations; that broader material is contextual and is not an independent detection for this domain.
Threat Response Pipeline
Discovery
Checks
Reports
Availability
11/13
Public Blocklist Status
Stored Capture
Domain Intelligence
Domain
URLScan Verdict
Analysis completed
score 0 report ↗
Google Safe Browsing
Flagged
Social engineering checked Sep 5, 2026
Server / ASN
cloudflare · AS13335 Cloudflare, Inc.
IP Context
Cloudflare shared edge
origin IP hidden
Edge-IP reputation is not attributed to this domain.
Registrar (base domain)
NameSilo
(US)
PhishDestroy Investigation
(US)
PhishDestroy Investigation
IP Address
172.67.151.133
CDN
Geo
Toronto, CA
Toronto, CANetworkAS13335 · Cloudflare, Inc.
The origin IP is hidden behind a CDN proxy. Reverse-IP results for the edge address contain unrelated tenants; finding the origin requires passive DNS or certificate-transparency data.
Registration (base domain)us-onedrive.com · Created Sep 2, 2026 (2d · Brand New!) — Expires Sep 2, 2027
Technical detailsDNS, SSL SANs, timestamps
First DetectedSep 5, 2026
DOM Analysisanalyzed Sep 5, 2026score 90/100
IoC Extractionscanned Sep 5, 20260 wallet · 0 Telegram IoCs
Submitted URLhttp://ks-gov.us-onedrive.com/
Nameserverskelly.ns.cloudflare.commarek.ns.cloudflare.com
TLS Fingerprint
TLS Observationvalid from Sep 4, 2026scanned Sep 5, 2026
ICANN OVERSIGHT
Registration: us-onedrive.com
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For the registrable domain us-onedrive.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Accreditation is a contract, not a safety seal.
Verify ICANN fees
Read RAA §3.18
PHISHDESTROY INVESTIGATIONICANN funding, contracts, and DNS abuse oversight
Technologies · 3 identified
Cloudflare Browser Insights
Analytics
RUM
Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.
www.cloudflare.com 100% confidence
Cloudflare
CDN
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% confidence
H
HTTP/3
Miscellaneous
HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% confidence
Detected via Cloudflare Radar · Wappalyzer engine
Report This Domain
Submit evidence & help protect others
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of ks-gov.us-onedrive.com · checked Sep 5, 2026
100
Good
Performance
FCP
0.76s
First Contentful Paint
LCP
0.76s
Largest Contentful Paint
CLS
0
Cumulative Layout Shift
TBT
0ms
Total Blocking Time
SI
1.04s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor
Evidence & External Reports
Security Analysis
OSINT & Intelligence
DNS & Network
SEO & Domain
Were You Affected by This Site?
If credentials were compromised, report immediately. Do not engage with recovery scammers.
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Action Fraud
Report fraud and cybercrime in England, Wales and Northern Ireland
Contact centre0300 123 2040
PhishDestroy listing review Not a law-enforcement report
Domain Appeal
Request a review if you own this domain and believe the listing is incorrect
Beware of recovery scammers! Recovery scammers may pose as investigators, lawyers, or tracing services. Do not pay upfront fees or disclose credentials. Learn more about recovery fraud →
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
97-country directory
Template-based draft • optional AI wording assistance requires separate consent
Review and submit it yourself
Related Infrastructure & Reports
Other reports on shared Cloudflare edge 1
Shared edge IP; unrelated tenants may be present.
Same registrar: NameSilo 6
caboorgy.info Recent threat reports 5
Recently added threat reports.
promo-p.org 
nova-play.org 
origin-protocol.org 
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive