Phishing detection: outlookmails.de

Microsoft
https://outlookmails.de Access site
Screenshot
Screenshot of outlookmails.de
Phishunt analysis Beta
45 high suspicion likely_phishingheuristic risk score · not a probability
Why?
  • +6.1 Google Safe Browsing
  • +5.3 Keyword match
  • +3.9 Password field
  • +2.2 Country mismatch
  • +1.7 Shared IP cluster
  • +1.1 ASN reputation
  • +1.1 Cert reuse
  • +1.1 No CSP header
  • +1.0 Site cluster
  • +0.7 Unrecognised DNS provider
  • +0.6 Login text in screenshot
  • +0.6 Suspicious TLD
  • +0.5 Young certificate
  • +0.3 Free CA
  • +0.3 Long domain
  • Boosted to 45: Google-flagged credential form
19 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Look-alike Outlook domain impersonating Microsoft email with a password input form posting to its own origin, apparently harvesting mailbox credentials. Flagged by Google Safe Browsing as social engineering; hosted in Germany with a free certificate.

Google Safe BrowsingPassword fieldSame-origin form
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-21 · confidence 85%
Domain & Network
Whois
Network
Country GermanyGermany
Hosting netcup GmbH
ASN AS197540
TLS Cert YR2
External detection Google Safe Browsing
GSB category: SOCIAL_ENGINEERING
CleanOpenPhish · PhishTank · TweetFeed · urlscan.io
Report this phishing

Tracked from 2026-10-20 23:27 UTC  ·  Last refreshed 2026-10-23 05:30 UTC