Security Scan: https://pub-00b2ddc67aee44e3bd461fe9ee9c5abe.

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/290740f6-f321-4771-8daf-2598fb53f459 Domain and IP registration (RDAP)/api/v1/rdap/290740f6-f321-4771-8daf-2598fb53f459How often this domain was scanned/api/v1/domain/stats/pub-00b2ddc67aee44e3bd461fe9ee9c5abe.r2.dev Scan history for this domain/api/v1/domain/history/pub-00b2ddc67aee44e3bd461fe9ee9c5abe.r2.dev?limit=15

This website contacted 4 IPs in 1 country across 3 domains to perform 5 HTTP transactions. The main domain is r2.dev and was registered 4 years 2 months ago.

Submitted URL: https://pub-00b2ddc67aee44e3bd461fe9ee9c5abe.r2.dev/index.html

AI Security Verdict

Moderate Risk

Confidence: 70%

Risk Score

Blank R2-bucket page delivering hex-obfuscated JavaScript flagged HIGH by IDS with a sink to an unrelated .su domain; no forms or IoCs, but obfuscation plus zero visible content indicates hidden malicious/redirect code.

Risk Factors (5)

Obfuscated JavaScript (hex/% encoded document.write, unescape) flagged by IDS as potentially bad traffic

Network sink to an unrelated .su domain with no visible purpose

Empty/blank page content with no title or text — possible cloaking or drive-by redirect

Anonymous Cloudflare R2 public-bucket hosting with no reputation or visible ownership

Content classifier flags adult content (41%) alongside technical documentation, inconsistent with a blank public file

Safety Factors (5)

No credential, password or payment forms detected (verified form counts all zero)

No Indicators of Compromise matched against the page or its resources

No YARA or native-YARA malware patterns detected

No credential exfiltration or cross-origin form submission observed

No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain name 'pub-00b2ddc67aee44e3bd461fe9ee9c5abe.r2.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'pub-00b2ddc67aee44e3bd461fe9ee9c5abe'. The second-level label 'r2' is 2 characters long split between zero vowels and one consonant, notching one digit. Segmentation suggests 2 words: r, 2. Average segment length settles at one character. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.82s

Total Load Time

105 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:59%

Script:Latin

Direction:ltr

Detection Details

Text Length:114 chars

Detector Agreement:100%

Website Classification

Primary Category

adult content41% confidence

Type: static

Method: ml+structural

All Detected Categories

adult content

41%

documentation technical

32%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	104.18.50.34Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.18.54.45Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	4	-	-