Security Report: pub-76926b15ba344a7b814330c83cca1f62.r2.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/3a38edbd-142a-48c9-a239-4ccf212761db Domain and IP registration (RDAP)/api/v1/rdap/3a38edbd-142a-48c9-a239-4ccf212761dbHow often this domain was scanned/api/v1/domain/stats/pub-76926b15ba344a7b814330c83cca1f62.r2.dev Scan history for this domain/api/v1/domain/history/pub-76926b15ba344a7b814330c83cca1f62.r2.dev?limit=15

This website contacted 2 IPs in 2 countries across 2 domains to perform 2 HTTP transactions. The main domain is r2.dev and was registered 4 years 2 months ago.

Submitted URL: https://pub-76926b15ba344a7b814330c83cca1f62.r2.dev/mail.com/home.html

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Fake Mail.com login on a Cloudflare R2 bucket that posts captured emails and passwords to redirectingtothemainpage.com. Classic cross-origin credential phishing — do not sign in.

Risk Factors (5)

Credential harvesting form (email + password) submitting cross-origin to redirectingtothemainpage.com

Impersonation of Mail.com brand on a non-official domain

Hosted on a free-to-publish Cloudflare R2 public bucket (r2.dev) rather than a registered corporate domain

Typosquat/misspelling artifacts in visible page text ('Gailcom', 'Mall.com')

Unranked domain with no attributable registration history for this tenant

Domain age information unavailable

Details

Page Title

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'pub-76926b15ba344a7b814330c83cca1f62.r2.dev' is registered with subdomain 'pub-76926b15ba344a7b814330c83cca1f62'. The core label 'r2' covers 2 characters holding 0 vowels versus one consonant; bonus characters include 1 digit. It segments into two words: r, 2. Average segment length settles at one character. No strong language cues emerged from the frequency lists.

Screenshot

Gailcom Sign in to update your account Login SSLv Email address Email address Password Password ©2023 Mall.com

Page Load Overview

0.55s

Total Load Time

95 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:103 chars

Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping52% confidence

Type: webapp

Method: ml+structural+ocr_tiebreaker

All Detected Categories

e-commerce shopping

52%

news media journalism

35%

finance banking

32%

documentation technical

31%

technology software

26%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	104.18.54.45Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	23.52.180.183Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
2	2	-	-