Security Scan: Outlook Web App

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0876afca-7d5b-41bd-af06-b7fd25495c49 Domain and IP registration (RDAP)/api/v1/rdap/0876afca-7d5b-41bd-af06-b7fd25495c49 Certificate Transparency/api/v1/ct/web.archive.org How often this domain was scanned/api/v1/domain/stats/web.archive.org Scan history for this domain/api/v1/domain/history/web.archive.org?limit=15

This website contacted 5 IPs in 1 country across 6 domains to perform 17 HTTP transactions. The main domain is web.archive.org and was registered 30 years ago.

Submitted URL: https://web.archive.org/web/20260414174030/https://mail-owaexchnange-autodisciover-mailbox.s3.us-east-1.amazonaws.com/index.html#[email protected]

The Cisco Umbrella rank of the primary domain is #13,499 of the top 1 million websites

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Archived page is an Outlook Web App credential-phishing landing: Microsoft branding on an unrelated S3 origin, a real password/username harvest form, a victim email in the URL fragment, and a HIGH ET PHISHING IDS alert. Never enter credentials.

Risk Factors (6)

Credential-harvesting form (2 password fields, 11 username/email fields) masquerading as an Outlook Web App login

Impersonation of Microsoft Outlook / Outlook Web App on a non-Microsoft domain (AWS S3 bucket path with a typo-squatted folder name 'mail-owaexchnange-autodisciover-mailbox')

High-severity IDS phishing signature (ET PHISHING OWA Mail Phishing Landing)

Victim email address carried in the URL fragment as a phishing-kit tracking token

Inline JavaScript encoding/decoding routines combined with third-party IP-geolocation lookups (ipify, ipinfo.io) and 'incorrect password' retry messaging

Single-source, unverified threat-intel indicator for an associated .onion address reported as xworm (malware) — weak corroboration, noted but not relied upon

Domain age information unavailable

Details

Page Title

Outlook Web App

Scan Type

public

Domain Name Analysis

Within the non-profit oriented generic top-level domain (.org), 'web.archive.org' is registered with subdomain 'web'. The registrable portion 'archive' spans 7 characters holding 3 vowels versus 4 consonants. Segmentation suggests 1 word: archive. Median word length is seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.09s

Total Load Time

214 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:1,548 chars

Detector Agreement:50%

Website Classification

Primary Category

technology software35% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

35%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	207.241.237.3	United States	AS7941Internet Archive
3	207.241.237.2	United States	AS7941Internet Archive
3	207.241.224.2	United States	AS7941Internet Archive
3	207.241.237.8	United States	AS7941Internet Archive
3	207.241.225.195	United States	AS7941Internet Archive
17	5	-	-