Security Scan Report: 37.71.36.165

Redirected to:
https://37.71.36.165/owa/auth/logon.aspx?replaceCurrent=1&url=https%3a...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 6 HTTP transactions. The main domain is 37.71.36.165.

Submitted URL: https://37.71.36.165

Effective URL:
https://37.71.36.165/owa/auth/logon.aspx?replaceCurrent=1&url=https%3a...
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Bare-IP host impersonating Microsoft Outlook's OWA login page and collecting username/password credentials — textbook credential phishing; do not enter any credentials.

Risk Factors (4)
Brand impersonation of Microsoft Outlook on a raw IP address with no associated domain
Credential-collection form (username + password fields) styled as a webmail login
Host is a bare IP, which cannot be the legitimate official Outlook/OWA endpoint
Obfuscated/duplicate password field ('passwordText') alongside the standard password input
Domain age information unavailable

Details

Page Title

Outlook

Scan Type

public

Domain Name Analysis

The domain '37.71.36.165' uses an unknown top-level domain without a subdomain. The second-level label '37.71.36.165' is 12 characters long split between zero vowels and zero consonants; it also includes 9 digits. Breaking it apart gives four words: 37, 71, 36, 165. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

[ 2 \ ES ol Outlook Password: © sign in

Page Load Overview

1.35s
Total Load Time
103 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:528 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software81% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
81%
documentation technical
79%
news media journalism
64%
healthcare medical
56%
government public service
53%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
637.71.36.165Sainte-Geneviève-des-Bois, Île-de-France, France
AS15557Societe Francaise Du Radiotelephone - SFR SA
61--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15043AE3FA9572C332867607463DBB28A3F2A8417824ED924387C1758EF81D76417EBD9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:/yDwuJmtz7e05Nnfvi2aD2xhkzdKV7aQblNoJmgK4e2FuzUEQnclYtcY:htzK05N7aD2xhEkF5F4nFuYcScY

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:56969:ApMQkCGguJAsWAwFFwo5BogQBIUAChwKGohKpgAzikBQmCiRQEQIQgAgyEOBNgjoEsoDSiCCiIVmNQBTgHEhRbAJCg4UYFxR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3f3f3f3f3f3f3f3f
Perceptual Hash:83f677010989d9fc
Difference Hash:d0ccccd8d8d0d0d0
Wavelet Hash:3f273f3f3f300000
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data