ScanMalware.com

Security Scan Report: pub-0599a4b463c94302b7b0538a36dd379a.r2.dev

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/275a2183-b2e0-41f4-97a0-4a2e4e134383Domain and IP registration (RDAP)/api/v1/rdap/275a2183-b2e0-41f4-97a0-4a2e4e134383How often this domain was scanned/api/v1/domain/stats/pub-0599a4b463c94302b7b0538a36dd379a.r2.devScan history for this domain/api/v1/domain/history/pub-0599a4b463c94302b7b0538a36dd379a.r2.dev?limit=15
This website contacted 7 IPs in 2 countries across 7 domains to perform 9 HTTP transactions. The main domain is r2.dev and was registered 4 years 2 months ago.

Submitted URL: https://pub-0599a4b463c94302b7b0538a36dd379a.r2.dev/servies.html

AI Security Verdict

Moderate Risk

Confidence: 88%

5
Risk Score

Fake cPanel 'Webmail Login' page hosted on an anonymous Cloudflare R2 bucket, collecting email/password and POSTing to an unrelated domain (llcgarant.com). Not an official cPanel or mail service — do not enter credentials.

Risk Factors (5)
Impersonation of the cPanel webmail login brand on a non-cPanel, non-mail-provider domain
Credential-collection login screen (email + password) deployed on anonymous cloud-storage hosting
Cross-origin POST of page data to an unrelated external domain (llcgarant.com)
Unranked domain with no attributable registration age (shared R2 tenant)
Mimics a legitimate service ('Webmail Login') to induce credential entry
Safety Factors (4)
Third-party scripts are loaded from well-known ranked CDNs (Google, Cloudflare, jQuery, Bootstrap)
No threat-intelligence / hunting rule / kit-roster hits were recorded for this URL
Page includes a copyright and privacy-policy link (though these are cPanel's, part of the impersonated content)
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 9 to 5
Domain age information unavailable

Details

Page Title

Webmail Login

Scan Type

public

Domain Name Analysis

Domain 'pub-0599a4b463c94302b7b0538a36dd379a.r2.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'pub-0599a4b463c94302b7b0538a36dd379a'. The core label 'r2' covers 2 characters containing zero vowels alongside one consonant, along with 1 digit. Breaking it apart gives 2 words: r, 2. Expect one character per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Screenshot not available

Page Load Overview

75.65s
Total Load Time
113 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:21%
Script:Latin
Direction:ltr

Detection Details

Text Length:1,303 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical45% confidence
Type: webapp
Method: ml+structural

All Detected Categories

healthcare medical
45%
technology software
44%
news media journalism
40%
adult content
36%
finance banking
35%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3104.18.50.34Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
189.116.147.123Paris, Île-de-France, France
AS47583Hostinger International Limited
1151.101.1.155Fastly · CDNUnited States
AS54113Fastly, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.10.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.13.95Google · CDNUnited States
AS15169Google LLC
1104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
07--

Detected Technologies7

PasswordField
100%
JQueryv2.2.4
100%
Bootstrapv4.0.0
100%
Cloudflare
50%
jQuery CDN
20%
cdnjs
20%
Google Hosted Libraries
20%

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data