ks-gov[.]us-onedrive[.]com

ks-gov.us-onedrive.com is a subdomain of us-onedrive.com. PhishDestroy first observed the hostname on Sep 5, 2026. The captured page title is “Sharepoint Secure Panel”. Current evidence score: 90/100 (critical).

Positive findings are stored from 4 sources: OpenPhish, Phishunt, Google Safe Browsing, and Cloudflare Radar. OpenPhish and Phishunt listed the hostname in the separate external-blocklist snapshot on Sep 5, 2026 at 06:20 UTC. Google Safe Browsing flagged the domain: Social Engineering on Sep 5, 2026 at 06:07 UTC. Cloudflare Radar classified the hostname as malicious and placed it in the phishing category; its verdict timestamp was not retained. Non-positive and contextual checks: URLScan completed without a malicious verdict (score 0) on Sep 5, 2026 at 05:08 UTC. No completed VirusTotal result is available.

The collector marked the hostname reachable on Sep 5, 2026 at 01:11 UTC, but did not retain the HTTP response code. Registration records for the registrable domain us-onedrive.com list NameSilo, LLC as the registrar and Sep 2, 2026 as the creation date. Registration preceded first observation by 2 days. At collection time, the hostname resolved to 172.67.151.133 on AS13335 (Cloudflare, Inc.). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. DOM analysis on Sep 5, 2026 at 02:22 UTC returned 90/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Google Trust Services as the certificate issuer with validity through Dec 3, 2026; checked Sep 5, 2026 at 04:02 UTC.

The content indicators and 4 positive source findings support the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.