Security Scan Report: site235744746.fo.team

Redirected to:
https://site235744746.fo.team/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 2 countries across 5 domains to perform 26 HTTP transactions. The main domain is fo.team and was registered 5 years ago.

Submitted URL: http://site235744746.fo.team/

Effective URL:
https://site235744746.fo.team/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Fake Microsoft Outlook Web App login on a free fo.team subdomain that posts entered credentials off-site to formmail.com; domain flagged as phishing by two feeds. Do not enter credentials.

Risk Factors (5)
Brand impersonation of Microsoft Outlook on a non-Microsoft domain
Credential-collecting login form with cross-origin submission to fp1.formmail.com
Multi-source corroborated phishing threat-intel match on the primary domain
Hidden recipient/redirect form fields indicating harvested data is mailed off-site
Free website-builder subdomain (fo.team) used as phishing infrastructure while claiming a major brand
Domain age information unavailable

Details

Page Title

Outlook Web App

Scan Type

public

Domain Name Analysis

The domain 'site235744746.fo.team' uses the .team top-level domain with subdomain 'site235744746'. The core label 'fo' covers 2 characters with 1 vowel and one consonant. Breaking it apart gives one word: fo. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://site235744746.fo.team/

Page Load Overview

1.47s
Total Load Time
605 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:44%
Script:Latin
Direction:ltr

Detection Details

Text Length:5,190 chars
Detector Agreement:50%

Website Classification

Primary Category

technology software74% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
74%
healthcare medical
62%
documentation technical
58%
finance banking
53%
news media journalism
50%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
891.200.28.220Russia
AS43776Relsoft communications Ltd.
3142.250.154.95Google · CDNUnited States
AS15169Google LLC
3142.251.110.94Google · CDNUnited States
AS15169Google LLC
391.227.52.83Russia
AS56806JSC Computing Forces
391.200.28.122Russia
AS43776Relsoft communications Ltd.
391.200.28.83Russia
AS43776Relsoft communications Ltd.
391.227.52.122Russia
AS56806JSC Computing Forces
267--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14E546E5FA8A2246E0D03DC1BE7F16C39BD8C1C878BCC7226FDBC462A9B43528A555F54

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:6X36vX5rS4CS00g40gpvIE0LxLW0gBv0ge0gU0gd0gU0gJhYCnvWkfE:6nXhYCnq

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:299109:IUCQBQUADZwQimCpQ8ighCIgkIPQAwypgBEbhQDKQejBuIeqAkShFAxg5MClFIKA1hzEYUoHhEKgoZoAgAgoZTQQUi3ARRgI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3f3f3f3f3f7fc3c3
Perceptual Hash:81837ccf037dde21
Difference Hash:d0c6ced8d6c01e9e
Wavelet Hash:3f2327273f3f8101
Color Hash:#77bf40

Scan History

Scan history not available

Unable to load historical scan data