ScanMalware.com

Security Scan Report: pub-06e43cd3590241a084b6d1224a1e15a1.r2.dev

Redirected to:
https://japanethis.com/itmustbeproductiveday.html?od=1synshort659143a6...
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/2099d5b1-39c6-45e4-9a9b-9583edc1ba2cDomain and IP registration (RDAP)/api/v1/rdap/2099d5b1-39c6-45e4-9a9b-9583edc1ba2cHow often this domain was scanned/api/v1/domain/stats/pub-06e43cd3590241a084b6d1224a1e15a1.r2.devScan history for this domain/api/v1/domain/history/pub-06e43cd3590241a084b6d1224a1e15a1.r2.dev?limit=15
This website contacted 1 IP in 1 country across 2 domains to perform 4 HTTP transactions. The main domain is r2.dev and was registered 4 years 2 months ago.

Submitted URL: https://pub-06e43cd3590241a084b6d1224a1e15a1.r2.dev/usdfyeyrffhsjdfhsjhfgzyuerfjhfsdjfhjfeyrfhedfektyrguegtreyutikreuyfgt.html

Effective URL:
https://japanethis.com/itmustbeproductiveday.html?od=1synshort659143a6...
Redirected

AI Security Verdict

Moderate Risk

Confidence: 50%

4
Risk Score

Anonymous R2 bucket file redirecting to an unrelated domain via an obfuscated query string, but the page served only a 502 with no forms, scripts, malware or impersonation. Suspicious, nothing concretely malicious.

Risk Factors (3)
Cloud-storage (R2 public bucket) hosting of a randomly-named HTML file with no site identity
Cross-domain redirect to an unrelated registrable domain (japanethis.com) with an obfuscated query string
No verifiable site content, ownership or reputation for the destination domain
Safety Factors (5)
No threat-intelligence Indicators of Compromise against the page or its resources
No YARA malware or native-YARA high-precision hits
No credential, login or payment forms and no cross-origin credential handling
No brand impersonation and no typosquatting of a known brand
Suricata alerts are informational ET INFO observations of an R2 public-bucket DNS/SNI lookup, not phishing or malware signatures
Domain age information unavailable

Details

Page Title

502 Bad Gateway

Scan Type

public

Domain Name Analysis

Domain 'pub-06e43cd3590241a084b6d1224a1e15a1.r2.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'pub-06e43cd3590241a084b6d1224a1e15a1'. Its registrable label 'r2' stretches across 2 characters holding 0 vowels versus 1 consonant; bonus characters include 1 digit. Segmentation suggests two words: r, 2. Median word length is one character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pub-06e43cd3590241a084b6d1224a1e15a1.r2.dev/usdfyeyrffhsjdfhsjhfgzyuerfjhfsdjfhjfeyrfhedfektyrguegtreyutikreuyfgt.html

Page Load Overview

1.78s
Total Load Time
1 KB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

0
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4104.18.50.34Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
41--

Detected Technologies2

Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T161E07DD24C24A52A16E01B726EF3724D6C9204D648629C91A55174CC466478A9807B61

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6:qzxVkMRJX77YmWUWCXuCadM82BYPvoTnrB8GGgUre+mfOIuB965:kxVkMjwPUraVmUOnV8GxykOIP5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:6d7d8fb8a7258c704d3d1147fa35ae3f

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3fffffffffffffff
Perceptual Hash:870707070f0f1f3f
Difference Hash:c000000000000000
Wavelet Hash:30f0f0f0f0f0f0f0
Color Hash:#ac6953

Other Hashes

Crop Resistant:c000000000000000

Scan History

Scan history not available

Unable to load historical scan data