Security Scan: Outlook Web App

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8c9a1dcc-d201-4a4f-9300-f9311a27386e Domain and IP registration (RDAP)/api/v1/rdap/8c9a1dcc-d201-4a4f-9300-f9311a27386eHow often this domain was scanned/api/v1/domain/stats/pub-f46924b64d9641f6a0cbcfdc1cd89d24.r2.dev Scan history for this domain/api/v1/domain/history/pub-f46924b64d9641f6a0cbcfdc1cd89d24.r2.dev?limit=15

This website contacted 4 IPs in 1 country across 3 domains to perform 5 HTTP transactions. The main domain is r2.dev and was registered 4 years 2 months ago.

Submitted URL: http://pub-f46924b64d9641f6a0cbcfdc1cd89d24.r2.dev/oautth.html

Effective URL:

https://bafybeibsqrtek2xohai4wovizdy53y4zwfvdpelrmeq7apktcqcoeecztu.ip...

Redirected

AI Security Verdict

High Risk

Confidence: 80%

Risk Score

Outlook-branded page titled "Outlook Web App" served from an anonymous R2/IPFS delivery chain with a HIGH IDS OWA-phishing alert — a Microsoft impersonation lure, though no credential form was captured.

Risk Factors (5)

Impersonation of Microsoft Outlook branding on a non-Microsoft, cloud-storage/IPFS-hosted page

IDS phishing alert for an OWA mail phishing landing page

Obfuscated delivery chain: public R2 bucket → cross-domain redirect to IPFS gateway

Different content served to datacenter scanner vs. residential client

Suspicious filename 'oautth.html' imitating OAuth terminology

Domain age information unavailable

Details

Page Title

Outlook Web App

Scan Type

public

Domain Name Analysis

Domain 'pub-f46924b64d9641f6a0cbcfdc1cd89d24.r2.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'pub-f46924b64d9641f6a0cbcfdc1cd89d24'. The registrable portion 'r2' spans 2 characters with 0 vowels and 1 consonant; bonus characters include 1 digit. Tokenizing the label suggests two words: r, 2. Expect one character per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.32s

Total Load Time

68 KB

Total Size

Language Analysis

Primary Language

🏳️UNKNOWN

Code: unknown

Confidence:0%

Detection Details

Text Length:15 chars

Detector Agreement:0%

Website Classification

Primary Category

adult content38% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

adult content

38%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	209.94.90.3	United States	AS40680Protocol Labs
1	104.18.50.34Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.18.54.45Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	209.94.90.2	United States	AS40680Protocol Labs
5	4	-	-