Security Scan: Mississippi Real Estate Commission

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0d239191-b4dd-4986-ba2b-ae2ab13286b0 Domain and IP registration (RDAP)/api/v1/rdap/0d239191-b4dd-4986-ba2b-ae2ab13286b0How often this domain was scanned/api/v1/domain/stats/pub-d02ee1b4a43248bfb0d7ce50b4a05762.r2.dev Scan history for this domain/api/v1/domain/history/pub-d02ee1b4a43248bfb0d7ce50b4a05762.r2.dev?limit=15

This website contacted 3 IPs in 1 country across 2 domains to perform 38 HTTP transactions. The main domain is r2.dev and was registered 4 years 2 months ago.

Submitted URL: https://pub-d02ee1b4a43248bfb0d7ce50b4a05762.r2.dev/login.html

AI Security Verdict

Confirmed Scam

Confidence: 88%

Risk Score

Cloned Mississippi Real Estate Commission login page hosted on a Cloudflare R2 bucket, harvesting username/password and posting them cross-origin to a Google Forms endpoint — clear credential phishing.

Risk Factors (5)

Impersonation of a government agency (Mississippi Real Estate Commission) on a non-official domain

Credential (username + password) capture form on an unranked cloud-storage subdomain

Cross-origin submission of form data to docs.google.com/formResponse (external exfiltration endpoint)

Unranked domain not present in Cisco Umbrella top 1M

Page content copied from a legitimate government portal (navigation, copyright, disclaimer) to lend false authenticity

Domain age information unavailable

Details

Page Title

Mississippi Real Estate Commission

Scan Type

public

Domain Name Analysis

Domain 'pub-d02ee1b4a43248bfb0d7ce50b4a05762.r2.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'pub-d02ee1b4a43248bfb0d7ce50b4a05762'. Count 2 characters in 'r2' with 0 vowels and 1 consonant, notching 1 digit. Word splitting yields 2 words: r, 2. Average segment length settles at one character. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.45s

Total Load Time

721 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:45%

Script:Latin

Direction:ltr

Detection Details

Text Length:740 chars

Detector Agreement:67%

Website Classification

Primary Category

technology software64% confidence

Type: spa

Method: ml+structural

All Detected Categories

technology software

64%

documentation technical

50%

real estate property

44%

government public service

34%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
14	104.18.54.45Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
12	205.144.237.15	Jackson, Mississippi, United States	AS7086Mississippi, Department of Information Technology Services (ITS)
12	104.18.50.34Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
38	3	-	-