Security Scan Report: outlook-login.github.io

Submitted: Completed: publiccompleted
This website contacted 9 IPs in 2 countries across 5 domains to perform 14 HTTP transactions. The main domain is github.io and was registered 13 years ago.

Submitted URL: https://outlook-login.github.io/Validar

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Confirmed Microsoft Outlook phishing: a GitHub Pages subdomain shows a fake Microsoft 'Inicia sesión' page harvesting email/password, flagged by Safe Browsing and a CRITICAL IDS phishing alert.

Risk Factors (5)
Brand impersonation of Microsoft Outlook on a non-Microsoft domain (github.io free hosting subdomain)
Credential harvesting login form (email + password) presented as a Microsoft sign-in page
Google Safe Browsing Social Engineering (phishing) detection
CRITICAL IDS phishing alert specifically naming this page as Outlook phishing on github.io
Domain unranked in Cisco Umbrella; subdomain creation date unknown on shared GitHub Pages hosting
Domain age information unavailable

Details

Page Title

Administrador de Servicios

Scan Type

public

Domain Name Analysis

Domain 'outlook-login.github.io' uses the British Indian Ocean Territory country-code top-level domain (.io) and includes subdomain 'outlook-login'. Count 6 characters in 'github' holding two vowels versus four consonants. Splitting it apart reveals three words: g, it, hub. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

EE Microsoft Inicia sesión & Correo electrónico @ Contraseha 8

Page Load Overview

0.87s
Total Load Time
218 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:43%
Script:Latin
Direction:ltr

Detection Details

Text Length:79 chars
Detector Agreement:50%

Website Classification

Primary Category

government public service50% confidence
Type: static
Method: ml+structural

All Detected Categories

government public service
50%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6185.199.108.153Fastly · CDNUnited States
AS54113Fastly, Inc.
1185.199.109.153Fastly · CDNUnited States
AS54113Fastly, Inc.
1104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1195.154.239.27Paris, Île-de-France, France
AS12876Scaleway SAS
1142.251.110.95Google · CDNUnited States
AS15169Google LLC
1192.178.183.94Google · CDNUnited States
AS15169Google LLC
1185.199.110.153Fastly · CDNUnited States
AS54113Fastly, Inc.
1195.154.239.26Paris, Île-de-France, France
AS12876Scaleway SAS
1185.199.111.153Fastly · CDNUnited States
AS54113Fastly, Inc.
149--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11D31AC9040E80C1752119CD8A4D17E0C3EDDC4378756DE08F5BD06E91F8BF4BC5A7529

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:kHksgCO+GcDmV0CXdhj3CHdhZ1VMGSF1t2YS51Gyi1tuNR8SBG+5uNVvVaj:Ce+DG0CeHjZ1+GSFc7Gf+PBHxj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1739:AAAQAKAABAAgAUQAAAABBBAAAAKAgIMAACAAAAALAAABAIAAAGEAAACEYAAAAAAAIIAEAAAAAAAIIABAAQAAAAKAAIAAAYgg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:f8f0fc9ba5a54d2f
Perceptual Hash:c3dc40668f996772
Difference Hash:a2a0b0324dad99d8
Wavelet Hash:f8f0fc98e121452f
Color Hash:N/A

Other Hashes

Crop Resistant:a2a0b0324dad99d8

Scan History

Scan history not available

Unable to load historical scan data