outlook.verifytoken.com

Microsoft

https://outlook.verifytoken.com/s/63bzgfsvbwsfcdx7y9/584dd8/90eab167-7429-489f-99f6-ce86e8d0d81a Access site

Screenshot

Investigate

Domain outlook.verifytoken.com5 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

IP 34.194.247.17

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://outlook.verifytoken.com/s/63bzgfsvbwsfcdx7y9/584dd8…

urlscan

Wayback

archive.today

Cert R13

crt.sh

Censys

Google CT

Phishunt analysis Beta

20 low suspicionheuristic risk score · not a probability

Why?

+5.3 Keyword match
+3.9 Password field
+3.0 Site cluster
+3.0 OpenPhish
+1.4 ASN reputation
+1.1 No CSP header
+0.6 Brand impersonation in path
+0.6 Login text in screenshot
+0.5 Long domain
+0.3 Free CA
+0.2 Suspicious TLD
+0.1 External scripts
+0.1 Deep subdomain

17 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Outlook phishing page on verifytoken.com using a fake token verification flow with a long randomized path. Contains a same-origin password form with explicit login keywords. Brand appears off-host. Confirmed malicious by OpenPhish.

Password fieldOpenPhishLogin text in screenshot

AI-generated from stored detector signals - the AI never visited the site. · 2026-07-23 · confidence 65%

Domain & Network

Whois

Registrar MarkMonitor Inc.

Network

IP 34.194.247.17

Country

United States

Hosting Amazon.com, Inc.

ASN AS14618

TLS Cert R13

External detection OpenPhish

CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io

Report this phishing

Network / ASN Amazon.com, Inc.

abuse@amazonaws.com Web form

Registrar MarkMonitor Inc.

abusecomplaints@markmonitor.com

Brand owner Microsoft

phish@office365.microsoft.com Web form

Submit to blocklists

Google Safe Browsing Microsoft SmartScreen APWG PhishTank

Tracked from 2026-06-25 13:01 UTC · Last refreshed 2026-08-31 09:30 UTC

Phishing detection: outlook.verifytoken.com