owa[.]bdo[.]com

This domain is flagged as a high-risk brand impersonation scam, specifically targeting Microsoft Outlook. The domain owa.bdo.com was registered through Cloudflare, Inc. and resolves to the IPv6 address 2606:4700:4407::6812:2a16. The site's page title, 'Outlook Web App,' suggests an attempt to mimic the legitimate Outlook Web Access service, which is a common tactic in phishing attacks aimed at stealing user credentials. The domain has a Gridinsoft trust score of 0 out of 100, indicating a very low level of trust. It has been blocked by three security blocklists, including PhishDestroy, PhishingDB, and BLP-Malware, further underscoring the risk. The SSL certificate is issued by GlobalSign nv-sa, which is a reputable certificate authority, but this does not guarantee the site's legitimacy, as phishers often use valid SSL certificates to instill a false sense of security. The domain was created on February 28, 1995, which is unusually old for a typical phishing domain, suggesting that it might have been compromised or re-purposed. Despite this, the domain remains active as of July 12, 2026. Analysis indicates that users should exercise extreme caution when interacting with this domain and avoid entering any sensitive information. Security teams and defenders are advised to block access to this domain to prevent potential credential theft and other malicious activities. The exact content and structure of the site have not been analyzed, but the combination of the page title and the domain's poor reputation strongly suggest a phishing operation. Immediate action to mitigate the risk is recommended.