Security Scan Report: pub-e4b13c28b9ef4867a84f0a61d1d81aef.r2.dev

Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 2 domains to perform 4 HTTP transactions. The main domain is r2.dev and was registered 4 years 2 months ago.

Submitted URL: https://pub-e4b13c28b9ef4867a84f0a61d1d81aef.r2.dev/link.html

AI Security Verdict

Moderate Risk

Confidence: 60%

4
Risk Score

Sparse R2 bucket page showing a partial 'Microsoft' text on a non-Microsoft domain. No forms, scripts, or threat-intel hits, so suspicious but not confirmed phishing or malware.

Risk Factors (3)
Partial 'Microsoft' text appears on a non-Microsoft r2.dev cloud bucket, creating a possible brand-lure concern.
Unranked domain and unknown tenant page age behind a shared Cloudflare R2 namespace.
Minimal page content with an unknown title reduces transparency.
Safety Factors (4)
No credential, login, or payment forms present.
No JavaScript behavioral signals or cross-origin credential exfiltration.
No Indicators of Compromise, hunting rule malware hits, or malicious IDS alerts.
No known malicious kit or phishing infrastructure match.
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

You're looking at domain 'pub-e4b13c28b9ef4867a84f0a61d1d81aef.r2.dev' on the developer-focused generic top-level domain (.dev) and includes subdomain 'pub-e4b13c28b9ef4867a84f0a61d1d81aef'. Its registrable label 'r2' stretches across 2 characters containing zero vowels alongside one consonant; bonus characters include 1 digit. Splitting it apart reveals two words: r, 2. Median word length comes out to one character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pub-e4b13c28b9ef4867a84f0a61d1d81aef.r2.dev/link.html

Page Load Overview

1.45s
Total Load Time
98 KB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

0
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2104.18.54.45Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.50.34Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.241.25.208Dallas, Texas, United States
AS394380Leaseweb USA, Inc.
43--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19093AC752BC9FD2756DD9907AF82BEB44023E063B1C2A187B65D398D0FBC9878132D85

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:Kw2KXzy7ItvyqZjc1/T8Esdz/bb2zlnUVdZiI:Kw2Oystv3Zjc5T8Esdz/f2zlnUX

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:94886:XAnIAzkXEDpIaSBCg0wAmCA4SBJ0AAYpIALEO2wJmsNAdhGArgEQBAHUACpAhKkBFiJlhqxhHZlUEEfyTCAUkNJghQaZAIQB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7e7ffffff
Perceptual Hash:b389cccc3333cccc
Difference Hash:0008000c0c000808
Wavelet Hash:3c3c2424273f3f27
Color Hash:N/A

Other Hashes

Crop Resistant:0008000c0c000808

Scan History

Scan history not available

Unable to load historical scan data