Security Scan Report: owa-outgfgfhfhh.blogspot.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 2 domains to perform 4 HTTP transactions. The main domain is blogspot.com and was registered 26 years ago.

Submitted URL: https://owa-outgfgfhfhh.blogspot.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Fake Outlook login on a blogspot subdomain that relays entered emails and passwords to an anonymous formsubmit.co/ProtonMail address. Classic credential phishing — do not sign in; report it.

Risk Factors (5)
Brand impersonation of Microsoft Outlook on a non-Microsoft, unranked blogspot.com subdomain
Credential collection form (email + password) hosted on attacker-controlled free subdomain
Cross-origin POST of submitted data to formsubmit.co relay addressed to [email protected] (credential exfiltration)
Threat-intel phishing report on the primary domain
Subdomain naming mimics an Outlook Web Access hostname ('owa-...') to appear legitimate
Domain age information unavailable

Details

Page Title

Outlook Login

Scan Type

public

Domain Name Analysis

You're looking at domain 'owa-outgfgfhfhh.blogspot.com' on the commercial generic top-level domain (.com) with subdomain 'owa-outgfgfhfhh'. Its registrable label 'blogspot' stretches across 8 characters holding 2 vowels versus six consonants. Segmentation suggests 1 word: blogspot. No strong language cues emerged from the frequency lists.

Screenshot

Diese Website verwendet Cookies von Google*um Dienste anzubieten und Zugriife zu analysierens Deine IP ies Dionstes gewahielsiet werden [A ‘Adresse und dein User-Agent werden zusammen mit Messwerte...

Page Load Overview

0.53s
Total Load Time
67 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:36%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:532 chars
Detector Agreement:50%
Language mismatch: Declared as en but detected as de

Website Classification

Primary Category

technology software60% confidence
Type: webapp
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
60%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2192.178.183.132Google · CDNUnited States
AS15169Google LLC
1151.101.129.155Fastly · CDNUnited States
AS54113Fastly, Inc.
1151.101.65.155Fastly · CDNUnited States
AS54113Fastly, Inc.
43--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11743CF76A54B200A71E2493C7BA7B7057FB19603C092C855BDCC2898AF9CEC2CD917F2

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:OFLnOQdKV7aQblNuFYTk7NUqAEPIzEfsXhwevIclm62xXW3FjIVZangvjeqPwnup:OtOQkF5QhWEkX6Bclm62xXUFjI2gimD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:55354:UomAgCcOE8KABFDQFQYwBeAQA0RAbjAFeAwjECUnggwqHAhcMDEEFFYI6OWIKR8SmxBMJQIy5SUTwAUDGHKMAcukIDkMYArA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:001f1f1f1f1f1f1f
Perceptual Hash:8c63637361616773
Difference Hash:e07074b4b4747474
Wavelet Hash:000d1f171f1f1f1f
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data