Security Scan Report: pub-d37b8cff4381478390372f45fa529228.r2.dev

Submitted: Jul 27, 2026, 12:45:03 AMCompleted: Jul 27, 2026, 12:46:23 AMpubliccompleted
Loading additional data...

Summary

This website contacted 5 IPs in 1 country across 5 domains to perform 3 HTTP transactions. The main domain is pub-d37b8cff4381478390372f45fa529228.r2.dev and was registered NaN years ago.

Submitted URL: https://pub-d37b8cff4381478390372f45fa529228.r2.dev/doc_start.html?folder=bm6JLG7JQP&module=aSoqKkBvKioqKi5kZQ==

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Page hosts a credential‑phishing login form, uses a base64‑encoded victim email, and impersonates a different brand – confirmed scam.

Risk Factors
Brand impersonation (email domain o****.de vs. pub‑...r2.dev)
Credential collection form on unrelated domain
Unranked domain with no reputation
Domain age information unavailable

Details

Page Title

Access your document

Scan Type

public

Language

🇺🇸

English

(53% confidence)

Category

unknown

(0%)

Domain Information

The domain name 'pub-d37b8cff4381478390372f45fa529228.r2.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'pub-d37b8cff4381478390372f45fa529228'. The core label 'r2' covers 2 characters containing zero vowels alongside 1 consonant, along with one digit. It segments into two words: r, 2. Average segment length settles at 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pub-d37b8cff4381478390372f45fa529228.r2.dev/doc_start.html?folder=bm6JLG7JQP&module=aSoqKkBvKioqKi5kZQ==

Page Load Overview

2.30s
Total Load Time
11
HTTP Requests
9
Domains
84 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:53%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:53%
Script Type:Latin
Text Length:517 chars
Detector Agreement:67%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3142.251.110.95Google · CDNUnited States
AS15169Google LLC
2142.251.20.95Google · CDNUnited States
AS15169Google LLC
2104.20.16.229Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.54.45Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.10.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
115--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11592B545B9A1048E274389BBB72F76E5E101401B6809C584F97EBD386F9CF13EE726B4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:xGFkQFj3TKlxVWjpUO+SFSc/eahSFJmRp2K/GGQMZwtNng7gCK:xGFkQFj3YVYGO+SFSc/e4pL/GGQJtNca

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:19928:ZPLQIgWgWABHgRoBGAAKgUaMAAZosAQjjqKAURXFREoB6iFkPlooAAxKCQAAQYQugxrDAExEKIuqYVUAAPAgqlIFAhEAdAIN

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018181818241800
Perceptual Hash:99cc663339996666
Difference Hash:0c3032323228320c
Wavelet Hash:3c3c1c1c3c243c3c
Color Hash:#401f93

Other Hashes

Crop Resistant:0c3032323228320c

Scan History

Scan history not available

Unable to load historical scan data