Security Scan: Webmail Login!!!

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/16a779a2-4084-4220-908f-871de09d5497 Domain and IP registration (RDAP)/api/v1/rdap/16a779a2-4084-4220-908f-871de09d5497 Certificate Transparency/api/v1/ct/pub-356ad1f1b7004ab18b5eebfcb05c5332.r2.dev How often this domain was scanned/api/v1/domain/stats/pub-356ad1f1b7004ab18b5eebfcb05c5332.r2.dev Scan history for this domain/api/v1/domain/history/pub-356ad1f1b7004ab18b5eebfcb05c5332.r2.dev?limit=15

This website contacted 9 IPs in 1 country across 7 domains to perform 20 HTTP transactions. The main domain is r2.dev and was registered 4 years 1 month ago.

Submitted URL: https://pub-356ad1f1b7004ab18b5eebfcb05c5332.r2.dev/oeojw.html

AI Security Verdict

Confirmed Scam

Confidence: 90%

Risk Score

Cloned cPanel Webmail login on an unranked Cloudflare R2 bucket; the email/password form posts to javascript:void(0), so credentials are harvested rather than submitted — treat as credential phishing.

Risk Factors (5)

Credential (email + password) capture form on a shared cloud-storage bucket

Form action javascript:void(0) — no legitimate submission target for the credentials

Impersonation of cPanel Webmail login branding on a domain that is not cPanel's

Unranked, no attributable domain age (shared r2.dev tenant namespace)

Circular redirect chain and JS-obfuscator IDS heuristics

Domain age information unavailable

Details

Page Title

Webmail Login!!!

Scan Type

public

Domain Name Analysis

Domain 'pub-356ad1f1b7004ab18b5eebfcb05c5332.r2.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'pub-356ad1f1b7004ab18b5eebfcb05c5332'. The second-level label 'r2' is 2 characters long with 0 vowels and 1 consonant, notching 1 digit. Splitting it apart reveals 2 words: r, 2. Median word length is one character. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.66s

Total Load Time

245 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:1,351 chars

Detector Agreement:100%

Website Classification

Primary Category

social media network77% confidence

Type: webapp

Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network

77%

technology software

33%

documentation technical

28%

social_media

25%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	104.18.54.45Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	68.171.223.69	United States	AS22878ACENET, INC.
2	151.101.65.155Fastly · CDN	United States	AS54113Fastly, Inc.
2	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.11.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.250.154.95Google · CDN	United States	AS15169Google LLC
2	104.18.10.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.50.34Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	151.101.1.155Fastly · CDN	United States	AS54113Fastly, Inc.
20	9	-	-