OUTLOOK WEB ACCESS

documentation technical

English

You're looking at domain 'outlook-web-access-bccfe2.webflow.io' on the British Indian Ocean Territory country-code top-level domain (.io); it also runs on subdomain 'outlook-web-access-bccfe2'. Its registrable label 'webflow' stretches across 7 characters split between 2 vowels and five consonants. Tokenizing the label suggests two words: web, flow. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

field

email

email-form

html/47/99/4799abdd-de9e-4ff5-a711-8b2df238df4d.html.gz

frame-ancestors 'self' https://*.webflow.com http://*.webflow.com http://*.webflow.io http://webflow.com https://webflow.com

9a37601d1f5a5f2fba3b000694d4bf5e035c606d5485dd94e2997cbe2efe5c26

5743c640722924aa6974b1f602ad1abb67f4c5240cc4829ed64147cf0e6ecf83

3da8d271e0c7531747342f9b12742f4c90e49767d9b07cffcfd9a1bbb2a38130

24321c4a8e199cbd656840f4036a4b7da5a06d1901b76157265c87e8fd8166c8

viewport

generator

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

!function(o,c){var n=c.documentElement,t=" w-mod-";n.className+=t+"js",("ontouchstart"in o||o.DocumentTouch&&c instanceof DocumentTouch)&&(n.className+=t+"touch")}(window,document);

✅ Low Risk - https://outlook-web-access-bccfe2.webflow.io/

Requests	IP Address	Location	AS Autonomous System
0	13.226.247.18	Unknown	Unknown
0	104.18.160.117	Unknown	Unknown
0	13.226.247.220	Unknown	Unknown
0	172.64.151.8	Unknown	Unknown
0	104.18.95.41	Unknown	Unknown
0	104.18.161.117	Unknown	Unknown
0	13.226.247.67	Unknown	Unknown
0	2a06:98c1:3100::6812:24f8	Unknown	Unknown
0	2606:4700::6812:5f29	Unknown	Unknown
0	13.226.247.129	Unknown	Unknown
8	16	-	-

Security Scan Report: outlook-web-access-bccfe2.webflow.io

Summary

AI Security Verdict

Confirmed Scam

Risk Factors

Details

Primary Scan Blocked — Fallback Capture Shown

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History