Phishing detection: outlook2007tothunderbird.pages.dev
Microsoft Investigate
Domain
outlook2007tothunderbird.pages.dev1 CT host on apex
IP
172.66.44.95
URL
https://outlook2007tothunderbird.pages.dev
Cert
Let's Encrypt
Phishunt analysis Beta
21
low suspicionheuristic risk score · not a probability
Why?
- +5.3 Keyword match
- +5.1 Site cluster
- +5.1 urlscan.io
- +1.1 ASN reputation
- +1.1 No CSP header
- +1.1 No HSTS header
- +0.6 Long domain
- +0.6 Suspicious TLD
- +0.5 Young certificate
- +0.3 Free CA
- +0.1 Deep subdomain
15 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Site hosted on Cloudflare Pages uses Microsoft Outlook branding and a high keyword match to lure users, likely posing as an email migration tool to harvest credentials. Flagged malicious by urlscan. Free PaaS hosting and missing CSP headers are typical of disposable phishing infrastructure.
Keyword matchPaaS hosturlscan.io
AI-generated from stored detector signals - the AI never visited the site. · 2026-08-11 · confidence 55%
Domain & Network
Whois
Registrar
CloudFlare, Inc.
Network
IP
172.66.44.95
Country
United States
Hosting
Cloudflare, Inc.
ASN
AS13335
TLS Cert
Let's Encrypt
External detection
urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists
urlscan
VirusTotal
Whois
ipinfo
Greynoise