Security Report: pub-4e49405fbe2144e9a804826dae9ed060.r2.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/01478a94-1e80-4e92-9254-f9e0489e2a14 Domain and IP registration (RDAP)/api/v1/rdap/01478a94-1e80-4e92-9254-f9e0489e2a14 Certificate Transparency/api/v1/ct/pub-4e49405fbe2144e9a804826dae9ed060.r2.dev How often this domain was scanned/api/v1/domain/stats/pub-4e49405fbe2144e9a804826dae9ed060.r2.dev Scan history for this domain/api/v1/domain/history/pub-4e49405fbe2144e9a804826dae9ed060.r2.dev?limit=15

This website contacted 5 IPs in 2 countries across 4 domains to perform 12 HTTP transactions. The main domain is pub-4e49405fbe2144e9a804826dae9ed060.r2.dev and was registered 15 years ago.

Submitted URL: https://pub-4e49405fbe2144e9a804826dae9ed060.r2.dev/index.htm

AI Security Verdict

High Risk

Confidence: 78%

Risk Score

Anonymous Cloudflare R2 bucket hosting a cloned webmail login page that harvests username/password credentials and impersonates a third-party webmail service; no legitimate brand ownership. Avoid entering credentials.

Risk Factors (3)

Credential capture form (password + username fields) on shared cloud-storage hosting with no legitimate brand ownership

Impersonation of a webmail login interface on a domain that is not the webmail provider's

Hosting domain unranked and content age unknown/unattributable; no reputation backing a login page

Domain age information unavailable

Details

Page Title

:: Welcome to Webmail

Scan Type

public

Favicon Hash

MMH3: -2140379067

MD5: 228ba3f6d946af4298b080e5c934487c

Domain Name Analysis

You're looking at domain 'pub-4e49405fbe2144e9a804826dae9ed060.r2.dev' on the developer-focused generic top-level domain (.dev) and includes subdomain 'pub-4e49405fbe2144e9a804826dae9ed060'. The registrable portion 'r2' spans 2 characters containing 0 vowels alongside 1 consonant, along with one digit. Splitting it apart reveals two words: r, 2. Average segment length settles at one character. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

5.46s

Total Load Time

125 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:44%

Script:Latin

Direction:ltr

Detection Details

Text Length:276 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical64% confidence

Type: webapp

Method: ml+structural

All Detected Categories

documentation technical

64%

technology software

61%

adult content

50%

news media journalism

50%

government public service

47%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	104.18.54.45Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.50.34Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	219.118.67.12	Japan	AS2514NTT PC Communications, Inc.
2	151.101.1.155Fastly · CDN	United States	AS54113Fastly, Inc.
2	151.101.193.155Fastly · CDN	United States	AS54113Fastly, Inc.
12	5	-	-