Is emailqu.com safe?

The "Outlook Reader" asks for your real mailbox secrets

Alongside a "Buat Baru" (create new) button for generating a disposable address, the page carries an "Outlook Reader" tab. The captured page text instructs visitors to paste a combo of Outlook email, password and token to read the inbox directly. A legitimate temporary-email service never needs your existing Outlook password or an authentication token — it only ever issues you a new throwaway address.

The combination requested — email, password and token — is precisely what an attacker needs to take over a mailbox, reset linked accounts and read password-reset mail. The site gives no explanation of what happens to the credentials after they are submitted, and it discloses no operator, company or contact email on the captured page.

Clean encryption does not offset a phishing reputation

The technical layer looks ordinary: the saved TLS check found a valid encrypted connection and the browser threat feed returned no threat warning. Those results mean the transport is encrypted and no blocklist warning was served at scan time — they say nothing about what the site does with the data you type into it.

The reputation layer is the opposite. Ten independent antivirus families reported an adverse result for this domain, with vendors including alphaMountain.ai, Certego and CyRadar classifying it as phishing or malicious. That detection is a saved observation rather than a fresh submission, so timing should be confirmed, but the signal is real and it aligns exactly with the credential prompt on the page.

The domain is only 272 days old and the site publishes no contact email, no operator identity and no registration details. A brand-new, anonymous domain that asks for Outlook passwords is the classic shape of a credential-harvesting page rather than a genuine utility.