Security Scan: Outlook Web App

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/24ffc7e3-81da-414d-8e6d-90f13f016ad1 Domain and IP registration (RDAP)/api/v1/rdap/24ffc7e3-81da-414d-8e6d-90f13f016ad1How often this domain was scanned/api/v1/domain/stats/pub-f46924b64d9641f6a0cbcfdc1cd89d24.r2.dev Scan history for this domain/api/v1/domain/history/pub-f46924b64d9641f6a0cbcfdc1cd89d24.r2.dev?limit=15

This website contacted 4 IPs in 1 country across 3 domains to perform 4 HTTP transactions. The main domain is r2.dev and was registered 4 years 1 month ago.

Submitted URL: https://pub-f46924b64d9641f6a0cbcfdc1cd89d24.r2.dev/oautth.html

Effective URL:

https://bafybeibsqrtek2xohai4wovizdy53y4zwfvdpelrmeq7apktcqcoeecztu.ip...

Redirected

AI Security Verdict

High Risk

Confidence: 82%

Risk Score

Page presents itself as Microsoft's 'Outlook Web App' but is hosted on an R2 bucket redirected through an IPFS gateway, with an IDS HIGH OWA-phishing alert and a bot-blocking mismatch. Classic brand-impersonation phishing landing.

Risk Factors (5)

Impersonation of Microsoft's Outlook Web App brand on a non-Microsoft domain

IDS HIGH phishing alert for an OWA mail phishing landing (title over non-SSL)

Suspicious phishing-kit-style asset name 'oautth.html' on a public R2 bucket

Delivery chain: Cloudflare R2 public bucket redirecting to an IPFS gateway, typical of disposable phishing hosting

Serves a block/410 page to datacenter scanners while serving real content to residential clients (evasion behaviour)

Domain age information unavailable

Details

Page Title

Outlook Web App

Scan Type

public

Domain Name Analysis

You're looking at domain 'pub-f46924b64d9641f6a0cbcfdc1cd89d24.r2.dev' on the developer-focused generic top-level domain (.dev) and includes subdomain 'pub-f46924b64d9641f6a0cbcfdc1cd89d24'. Count 2 characters in 'r2' containing zero vowels alongside one consonant, along with 1 digit. Segmentation suggests two words: r, 2. Median word length is one character. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.98s

Total Load Time

68 KB

Total Size

Language Analysis

Primary Language

🏳️UNKNOWN

Code: unknown

Confidence:0%

Detection Details

Text Length:15 chars

Detector Agreement:0%

Website Classification

Primary Category

adult content38% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

adult content

38%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	104.18.54.45Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	209.94.90.3	United States	AS40680Protocol Labs
1	104.18.50.34Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	209.94.90.2	United States	AS40680Protocol Labs
4	4	-	-