Security Report: pub-389d64919a554cc4956fa6bcb19fb720.r2.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/46ac0cf0-401c-449a-be9c-1cbb0e918a10 Domain and IP registration (RDAP)/api/v1/rdap/46ac0cf0-401c-449a-be9c-1cbb0e918a10How often this domain was scanned/api/v1/domain/stats/pub-389d64919a554cc4956fa6bcb19fb720.r2.dev Scan history for this domain/api/v1/domain/history/pub-389d64919a554cc4956fa6bcb19fb720.r2.dev?limit=15

This website contacted 8 IPs in 2 countries across 6 domains to perform 6 HTTP transactions. The main domain is r2.dev and was registered 4 years 2 months ago.

Submitted URL: https://pub-389d64919a554cc4956fa6bcb19fb720.r2.dev/index(10).html

AI Security Verdict

High Risk

Confidence: 82%

Risk Score

Login form harvesting email and password from an anonymous Cloudflare R2 public bucket under a generic 'Webmail - Login' title, unranked with unattributable age — a classic credential-phishing profile; do not enter credentials.

Risk Factors (5)

Password-collecting login form on anonymous cloud-storage hosting

Generic 'Webmail - Login' branding with no owning domain or provider identity

Unranked domain; page creation date not attributable (shared r2.dev tenant)

Unrelated third-party domain (alphatrade-options.com) associated with a bare login page

Captured DOM text inconsistent/localized arbitrarily (Korean copyright line alongside English labels), consistent with kit reuse

Domain age information unavailable

Details

Page Title

Webmail - Login

Scan Type

public

Domain Name Analysis

The domain 'pub-389d64919a554cc4956fa6bcb19fb720.r2.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'pub-389d64919a554cc4956fa6bcb19fb720'. Count 2 characters in 'r2' holding 0 vowels versus one consonant, plus 1 digit. It segments into 2 words: r, 2. The median word length lands at one character. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.84s

Total Load Time

103 KB

Total Size

Language Analysis

Primary Language

🇰🇷Korean

Code: ko

Confidence:60%

Script:Hangul

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:49 chars

Detector Agreement:100%

Language mismatch: Declared as en but detected as ko

Website Classification

Primary Category

social media network69% confidence

Type: dynamic

Method: ml+structural+ocr_tiebreaker

All Detected Categories

social media network

69%

technology software

59%

phishing scam

51%

documentation technical

47%

cryptocurrency blockchain

43%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	104.18.54.45Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.18.50.34Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	151.101.1.155Fastly · CDN	United States	AS54113Fastly, Inc.
0	143.204.181.35Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
0	172.217.115.4Google · CDN	United States	AS15169Google LLC
0	208.91.114.103	Coquitlam, British Columbia, Canada	AS40934Fortinet Inc.
0	143.204.181.118Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
0	172.217.117.4Google · CDN	United States	AS15169Google LLC
6	8	-	-