Security Scan: Webmail Login

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a219eb7e-041f-489f-bf0f-7b8a1831d694 Domain and IP registration (RDAP)/api/v1/rdap/a219eb7e-041f-489f-bf0f-7b8a1831d694 Certificate Transparency/api/v1/ct/pub-922ab159fd2c4adfa24c7bca3bbdcd2e.r2.dev How often this domain was scanned/api/v1/domain/stats/pub-922ab159fd2c4adfa24c7bca3bbdcd2e.r2.dev Scan history for this domain/api/v1/domain/history/pub-922ab159fd2c4adfa24c7bca3bbdcd2e.r2.dev?limit=15

This website contacted 11 IPs in 2 countries across 8 domains to perform 22 HTTP transactions. The main domain is pub-922ab159fd2c4adfa24c7bca3bbdcd2e.r2.dev and was registered 14 years ago.

Submitted URL: http://pub-922ab159fd2c4adfa24c7bca3bbdcd2e.r2.dev/rindex1.html

Effective URL:

https://pub-922ab159fd2c4adfa24c7bca3bbdcd2e.r2.dev/rindex1.html

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Fake cPanel webmail login hosted on Cloudflare R2 bucket, harvesting credentials and exfiltrating to submit-form.com.

Risk Factors (5)

Credential harvesting via email/password login form

Brand impersonation of cPanel

Credential exfiltration to third-party form backend

Hosted on shared cloud storage with unknown page age

Unranked domain with no reputation

Domain age information unavailable

Details

Page Title

Webmail Login

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'pub-922ab159fd2c4adfa24c7bca3bbdcd2e.r2.dev' is registered with subdomain 'pub-922ab159fd2c4adfa24c7bca3bbdcd2e'. The second-level label 'r2' is 2 characters long with zero vowels and one consonant, plus 1 digit. Segmentation suggests 2 words: r, 2. Average segment length settles at 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

7.54s

Total Load Time

230 KB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:43%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:1,245 chars

Detector Agreement:100%

Language mismatch: Declared as en but detected as es

Website Classification

Primary Category

social_media50% confidence

Type: webapp

Method: structural

All Detected Categories

social_media

50%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	104.18.50.34Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	190.183.195.2	Bella Vista, Corrientes, Argentina	AS20207Gigared S.A.
2	151.101.1.155Fastly · CDN	United States	AS54113Fastly, Inc.
2	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.10.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.251.14.95Google · CDN	United States	AS15169Google LLC
2	104.18.1.22Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.54.45Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.11.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
22	11	-	-