ScanMalware.com

Security Scan Report: pub-5836438f6ec241b0a61df27487738e46.r2.dev

Site favicon
Submitted: Aug 8, 2026, 12:50:06 AMCompleted: Aug 8, 2026, 12:51:27 AMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 2 countries across 4 domains to perform 2 HTTP transactions. The main domain is pub-5836438f6ec241b0a61df27487738e46.r2.dev and was registered NaN years ago.

Submitted URL: https://pub-5836438f6ec241b0a61df27487738e46.r2.dev/index.html

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Page mimics official Notariato webmail, collects credentials on an untrusted domain with suspicious scripts – high risk of credential phishing.

Risk Factors
Credential collection on impersonated brand
Unranked/low‑reputation domain
Cross‑origin request to suspicious temporary domain
Right‑click blocking
Circular redirect warning
Domain age information unavailable

Details

Page Title

Webmail Notariato :: Welcome to Webmail Notariato

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

documentation technical

(40%)

Domain Information

The domain 'pub-5836438f6ec241b0a61df27487738e46.r2.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'pub-5836438f6ec241b0a61df27487738e46'. The registrable portion 'r2' spans 2 characters with 0 vowels and 1 consonant, notching 1 digit. Word splitting yields 2 words: r, 2. Median word length is one character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pub-5836438f6ec241b0a61df27487738e46.r2.dev/index.html

Page Load Overview

5.97s
Total Load Time
19
HTTP Requests
5
Domains
885 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:250 chars
Detector Agreement:67%

Website Classification

Primary Category

documentation technical40% confidence
Type: webapp
Method: ml+structural

All Detected Categories

documentation technical
40%
government public service
35%
technology software
34%
news media journalism
28%
phishing scam
27%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
7104.18.54.45Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
42.16.10.153Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
4104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
194--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A9E11C556E1CDE3F01B209E870FBF78828FD823ED5505C48B8FC45690F66F9D4A62AA4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:SVHf92U6KJobqwNDGFA3MJgNoUtUG38PV5pH:2F2bEobqw1Logey38PZ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:7286:JSlCjEJlCFAiSBZUiGgsBQDRBsEiBGUoyEGIZqDAIAgMhAAIYEBd0ABAASI4QxFJwCwAFzBKJArSpDiFSwAgRJA4qBDRWg9A

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7e7e7ffffffff
Perceptual Hash:b333cccc66668ccc
Difference Hash:00080c4d00080000
Wavelet Hash:0f070707f0f0f0f0
Color Hash:#c5878d

Other Hashes

Crop Resistant:00080c4d00080000

Scan History

Scan history not available

Unable to load historical scan data