Security Scan: Outlook Web App

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/cdfa462d-2dbf-4107-9017-658653b5bdfa Domain and IP registration (RDAP)/api/v1/rdap/cdfa462d-2dbf-4107-9017-658653b5bdfaHow often this domain was scanned/api/v1/domain/stats/pub-f46924b64d9641f6a0cbcfdc1cd89d24.r2.dev Scan history for this domain/api/v1/domain/history/pub-f46924b64d9641f6a0cbcfdc1cd89d24.r2.dev?limit=15

This website contacted 4 IPs in 1 country across 3 domains to perform 5 HTTP transactions. The main domain is r2.dev and was registered 4 years 2 months ago.

Submitted URL: http://pub-f46924b64d9641f6a0cbcfdc1cd89d24.r2.dev/oautth.html

Effective URL:

https://bafybeibsqrtek2xohai4wovizdy53y4zwfvdpelrmeq7apktcqcoeecztu.ip...

Redirected

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

An Outlook Web App login page hosted on an anonymous R2/IPFS bucket, not Microsoft, with a HIGH-severity IDS OWA-phishing alert. Classic brand-impersonation phishing landing; avoid entering any credentials.

Risk Factors (4)

Brand impersonation of Microsoft Outlook Web App on a non-Microsoft, unranked cloud-storage/IPFS host

Network IDS HIGH-severity phishing landing detection specific to OWA phishing

Content served from an anonymous public R2 bucket and IPFS gateway with no attributable ownership

Scanner-vs-client content mismatch (challenge page to datacenter IPs, live content to residential clients) alongside phishing indicators

Domain age information unavailable

Details

Page Title

Outlook Web App

Scan Type

public

Domain Name Analysis

The domain name 'pub-f46924b64d9641f6a0cbcfdc1cd89d24.r2.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'pub-f46924b64d9641f6a0cbcfdc1cd89d24'. Its registrable label 'r2' stretches across 2 characters holding 0 vowels versus one consonant; it also includes 1 digit. Breaking it apart gives two words: r, 2. Expect one character per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.05s

Total Load Time

68 KB

Total Size

Language Analysis

Primary Language

🏳️UNKNOWN

Code: unknown

Confidence:0%

Detection Details

Text Length:15 chars

Detector Agreement:0%

Website Classification

Primary Category

adult content38% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

adult content

38%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	104.18.54.45Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	209.94.90.2	United States	AS40680Protocol Labs
1	209.94.90.3	United States	AS40680Protocol Labs
1	104.18.50.34Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	4	-	-