outlook-mailer.com - phishunt.io

Microsoft

https://outlook-mailer.com/signin?t=eyJhbGciOiJIUzI1NiJ9.eyJ0cmFja2luZ190b2tlbiI6IjdhNmQ5MDcwLTY4ZWEtNGM0My05YjBkLTEyMGYxODY2MGQ4NCIsImNlbGwiOiJodHRwczovL3FnYmZ3b3c2MGYuZXhlY3V0ZS1hcGkudXMtd2VzdC0yLmFtYXpvbmF3cy5jb20vcHJvZC9hcGkvcGhpc2hpbmdjYW1wYWlnbiIsImNhbXBhaWduX3Rva2VuIjoiZDlmZGJmOWMtMmJlYi00YjNmLWJjNzgtZTdjODAwZDRiNDk3IiwidGVzdF90b2tlbiI6ZmFsc2UsImV4dGVybmFsX3RyYWluaW5nIjpmYWxzZSwiZGlyZWN0X2RlbGl2ZXJ5IjpmYWxzZSwiaWF0IjoxNzkzNjM0NTE1LCJpc3MiOiJodHRwczovL2FwcC5waGlzaHRocmVhdC5jb20iLCJleHAiOjE4MDE0MTA1MTV9.GCbfRMJELcVCuuNiflmDY85HCOQeaNmBQb5in6kTAXg Access site

Screenshot

Investigate

Domain outlook-mailer.com2 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

See every phishunt record for this domain

IP 34.247.115.252

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://outlook-mailer.com/signin?t=eyJhbGciOiJIUzI1NiJ9.ey…

urlscan

Wayback

archive.today

Cert Amazon RSA 2048 M04

crt.sh

Censys

Google CT

Phishunt analysis Beta

33 medium suspicion suspiciousheuristic risk score · not a probability

Why?

+6.1 Google Safe Browsing
+5.3 Keyword match
+5.1 Site cluster
+4.1 Brand in screenshot
+3.0 OpenPhish
+2.2 Country mismatch
+2.1 ASN reputation
+1.6 Favicon (kit)
+1.1 No CSP header
+0.6 Brand impersonation in path
+0.6 Login text in screenshot
+0.4 Long domain
+0.2 Suspicious TLD
+0.1 Hyphens

17 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Imitates a Microsoft Outlook sign-in page on an unrelated domain, using a tracking token in the URL, to harvest email credentials. Hosted on AWS in Ireland. Flagged by Google Safe Browsing and listed in OpenPhish.

Brand impersonation in pathGoogle Safe BrowsingOpenPhish

AI-generated from stored detector signals - the AI never visited the site. · 2026-11-03 · confidence 90%

Domain & Network

Whois

Registrar NameCheap, Inc.

Network

IP 34.247.115.252 AWS EC2

Country