Security Scan Report: customerservoces-agreement-renewal-2026-uubswjau10aoq.us-sea-1.linodeobjects.com

Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 1 domain to perform 1 HTTP transaction. The main domain is linodeobjects.com and was registered 8 years ago.

Submitted URL: https://customerservoces-agreement-renewal-2026-uubswjau10aoq.us-sea-1.linodeobjects.com/owaserverdata.html#[email protected]

The Cisco Umbrella rank of the primary domain is #35,133 of the top 1 million websites

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Phishing kit impersonating the Outlook Web App login on a Linode object-storage bucket, harvesting credentials via two password fields and exfiltrating them through a Telegram bot.

Risk Factors (6)
Brand impersonation of Microsoft Outlook on a non-Microsoft domain
Credential-harvesting login form with two password fields
Victim email address planted in the URL fragment as a lure/tracking token
Telegram bot token in inline script for credential exfiltration
Attacker-chosen hostname mimicking an account/agreement renewal notice
IDS phishing signature match
Domain age information unavailable

Details

Page Title

Outlook Web App

Scan Type

public

Domain Name Analysis

The domain name 'customerservoces-agreement-renewal-2026-uubswjau10aoq.us-sea-1.linodeobjects.com' uses the commercial generic top-level domain (.com) and includes subdomain 'customerservoces-agreement-renewal-2026-uubswjau10aoq.us-sea-1'. The registrable portion 'linodeobjects' spans 13 characters containing 5 vowels alongside eight consonants. It segments into three words: li, node, objects. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://customerservoces-agreement-renewal-2026-uubswjau10aoq.us-sea-1.linodeobjects.com/owaserverdata.html#beletz@59d1284009fcaf69d18d980cf9e1276c7a16.org

Page Load Overview

1.12s
Total Load Time
87 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,446 chars
Detector Agreement:50%

Website Classification

Primary Category

technology software46% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
46%
documentation technical
30%
corporate business
28%
government public service
26%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1172.238.39.197Tukwila, Washington, United States
AS63949Akamai Connected Cloud
0172.234.248.78Tukwila, Washington, United States
AS63949Akamai Connected Cloud
12--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14383197E5AE324836E1F5565B7F916063D3280138749FD073B5C7B888F86EB2CE912A4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:u+TW3EGr09Vo5fN6Jh9MMjyuclSuoVeNd3SKUkF5u4nFuTfSc3cUuFyPHSZH:uaWyeNgI0LXM7ys

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:88598:ccFAFxATYEBLMK8p4QCl1IN4FDmhQAIQNKAcMqARIJLAGQEQ7pAhQEEQAmNQAkAwAQQkAspaFOIAESaUB8AAFihPwsABhqkO

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3f3f3f3f3f3f3f3f
Perceptual Hash:83e66c090999d9fe
Difference Hash:d0ccccd8d0d0d0d0
Wavelet Hash:3f33373f3f0f0000
Color Hash:#783a45

Scan History

Scan history not available

Unable to load historical scan data