ScanMalware.com

Security Scan Report: pub-cb72691642c444eb900a44aa1d8a7107.r2.dev

Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/37a441a9-91c7-410e-97a1-40028646b6e4Domain and IP registration (RDAP)/api/v1/rdap/37a441a9-91c7-410e-97a1-40028646b6e4How often this domain was scanned/api/v1/domain/stats/pub-cb72691642c444eb900a44aa1d8a7107.r2.devScan history for this domain/api/v1/domain/history/pub-cb72691642c444eb900a44aa1d8a7107.r2.dev?limit=15
This website contacted 8 IPs in 1 country across 7 domains to perform 8 HTTP transactions. The main domain is r2.dev and was registered 4 years 2 months ago.

Submitted URL: https://pub-cb72691642c444eb900a44aa1d8a7107.r2.dev/aguiyi-e5cc43015815732a4d38f73eec6434e3e5cc43015815732a4d38f73eec6434e3e5cc43015815732a4d38f73eec6434e3outl00kAguiyi.html

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Fake Microsoft Outlook login hosted on a Cloudflare R2 bucket that exfiltrates entered emails and passwords to administrativedutyworkshop.life; classic credential phishing.

Risk Factors (6)
Impersonation of Microsoft Outlook login on a non-Microsoft cloud-storage bucket
Credential-harvesting form (email + password) submitting to an external PHP endpoint
Cross-origin POST of user input to administrativedutyworkshop.life
Multiple HIGH-severity IDS phishing landing-page signatures
Threat-intel phishing report on the primary hosting domain
Unranked domain with no legitimate reputation, hosted on a free public R2 bucket
Domain age information unavailable

Details

Page Title

Outlook

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'pub-cb72691642c444eb900a44aa1d8a7107.r2.dev' is registered, featuring subdomain 'pub-cb72691642c444eb900a44aa1d8a7107'. The core label 'r2' covers 2 characters split between zero vowels and 1 consonant, along with 1 digit. Segmentation suggests 2 words: r, 2. Expect one character per word on average. No strong language cues emerged from the frequency lists.

Screenshot

[ 2 \ ES ol Outlook Email address: Password:

Page Load Overview

0.48s
Total Load Time
116 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:32 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1104.18.54.45Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.20.95Google · CDNUnited States
AS15169Google LLC
1104.18.10.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.50.34Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
88--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T146C27D2E64A6390F047394BC36FBB30A3E55846B2505CF89BCAE7E648F895234C370D5

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:S4/DgohPzb5EPlJFfggvNc4XIb2Squz62iz4mN/DyOfgC/zqvdHl06907:SLkNoJmgK4e2FuzpcX/zqvdF0807

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:27202:Q8LKwIWA4pQkQEzBAFAQFHKKAEEFgpxShQxMUJmG8giIsHMCAtyRhUAFCCcgNiAiMwolABcEAKfMhRkVCYUtTYAYgAkgIDr0

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3f3f3f3f3f3f3f3f
Perceptual Hash:83f627010989ddfe
Difference Hash:d0ccccd8d0d0d0d0
Wavelet Hash:0800242400000000
Color Hash:060000001c0

Other Hashes

Crop Resistant:a09c989080808080,f184acb6b6ac84e1,0e71710e20000000

Scan History

Scan history not available

Unable to load historical scan data