Security Scan Report: pub-0599a4b463c94302b7b0538a36dd379a.r2.dev

Submitted: Completed: publiccompleted
This website contacted 6 IPs in 2 countries across 7 domains to perform 9 HTTP transactions. The main domain is r2.dev and was registered 4 years 2 months ago.

Submitted URL: https://pub-0599a4b463c94302b7b0538a36dd379a.r2.dev/servies.html

AI Security Verdict

Confirmed Scam

Confidence: 85%

9
Risk Score

Fake 'Webmail Login' page impersonating cPanel on a random Cloudflare R2 bucket, capturing email/password and posting to an unrelated third-party domain — credential phishing.

Risk Factors (5)
Impersonation of cPanel webmail login on a non-official domain
Credential-entry webmail screen hosted on anonymous cloud-storage bucket
Cross-origin POST to unrelated third-party domain (llcgarant.com)
Unranked domain with unknown real age and negligible legitimacy signals
Use of a third party's copyright/branding to lend authenticity to the login page
Domain age information unavailable

Details

Page Title

Webmail Login

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'pub-0599a4b463c94302b7b0538a36dd379a.r2.dev' is registered with subdomain 'pub-0599a4b463c94302b7b0538a36dd379a'. Count 2 characters in 'r2' split between zero vowels and 1 consonant; bonus characters include one digit. Tokenizing the label suggests 2 words: r, 2. Expect one character per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Screenshot not available

Page Load Overview

80.72s
Total Load Time
113 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:21%
Script:Latin
Direction:ltr

Detection Details

Text Length:1,303 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical45% confidence
Type: webapp
Method: ml+structural

All Detected Categories

healthcare medical
45%
technology software
44%
news media journalism
40%
adult content
36%
finance banking
35%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4104.18.54.45Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
189.116.147.123Paris, Île-de-France, France
AS47583Hostinger International Limited
1151.101.65.155Fastly · CDNUnited States
AS54113Fastly, Inc.
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.10.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.13.95Google · CDNUnited States
AS15169Google LLC
06--

Detected Technologies7

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data