Security Scan Report: login-outlook365.yzz.me

Redirected to:
https://suspended-domain.net/
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 2 countries across 6 domains to perform 16 HTTP transactions. The main domain is yzz.me and was registered 4 years 3 months ago.

Submitted URL: https://login-outlook365.yzz.me/

Effective URL:
https://suspended-domain.net/
Redirected

AI Security Verdict

High Risk

Confidence: 70%

7
Risk Score

The hostname login-outlook365.yzz.me mimics a Microsoft Outlook 365 login on a free host IDS links to threat-actor abuse. The phishing page itself is gone (now a suspension notice), but the deceptive domain is a high-risk artifact — do not enter credentials.

Risk Factors (3)
Deceptive hostname crafted to look like an Outlook 365 login on a non-Microsoft domain
Free hosting domain flagged by IDS as abused by a threat actor (TLS SNI and DNS lookups for *.yzz.me)
Single-source (unverified) threat-intel report of known-attacker behaviour for the host IP
Domain age information unavailable

Details

Page Title

Domain Suspended

Scan Type

public

Domain Name Analysis

Domain 'login-outlook365.yzz.me' uses the Montenegrin country-code top-level domain (.me) with subdomain 'login-outlook365'. Its registrable label 'yzz' stretches across 3 characters holding 0 vowels versus 3 consonants. It segments into 2 words: y, zz. The median word length lands at 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

This site requires Javascript to work, please enable Javascript in your browser or use a browser with Javascript support

Page Load Overview

2.05s
Total Load Time
475 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,246 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software99% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
99%
documentation technical
49%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7185.27.134.127United Kingdom
AS34119Wildcard UK Limited
177.72.1.44London, England, United Kingdom
AS12488Krystal Hosting Ltd
1104.26.3.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.110.95Google · CDNUnited States
AS15169Google LLC
1142.251.110.94Google · CDNUnited States
AS15169Google LLC
1172.67.68.11Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.13.95Google · CDNUnited States
AS15169Google LLC
1104.26.2.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.20.94Google · CDNUnited States
AS15169Google LLC
1610--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T119111EB9ECA0E0959B8010C01936D66E6411A6E6E511CDEF94C242E495E0BDC0E89C3A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:kITsVymIsYv5WuVLZ9hNIB0F2egLis5Z/DHVXRq:7x5WuFZzEJBHdRq

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:862:EAAAAAEAAAAAAAACAAAAAQAIACAACAAAAAAAAAAhAAAAAgAIAAABAAAAAAAAAAAAAAQCAAAAACAAAAACAIAAAIAAhAAAAAIA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0fffffffffffffff
Perceptual Hash:9d1d1d1d1d1d1d1c
Difference Hash:3000000000000000
Wavelet Hash:00f0f0f0f0f0f0f0
Color Hash:N/A

Other Hashes

Crop Resistant:3000000000000000

Scan History

Scan history not available

Unable to load historical scan data