Security Report: pub-f3b9586fd69a40fab3c14f8b90d9a5bd.r2.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4ec1c76e-d8df-401f-bb1c-3d3d0b58778b Domain and IP registration (RDAP)/api/v1/rdap/4ec1c76e-d8df-401f-bb1c-3d3d0b58778bHow often this domain was scanned/api/v1/domain/stats/pub-f3b9586fd69a40fab3c14f8b90d9a5bd.r2.dev Scan history for this domain/api/v1/domain/history/pub-f3b9586fd69a40fab3c14f8b90d9a5bd.r2.dev?limit=15

This website contacted 9 IPs in 3 countries across 6 domains to perform 6 HTTP transactions. The main domain is r2.dev and was registered 4 years 2 months ago.

Submitted URL: https://pub-f3b9586fd69a40fab3c14f8b90d9a5bd.r2.dev/grace-domain000.html

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Confirmed phishing: a fake 'Webmail - Login' credential form hosted on a disposable Cloudflare R2 bucket, flagged twice by Google Safe Browsing for social engineering. Do not enter any credentials.

Risk Factors (5)

Google Safe Browsing social-engineering (phishing) detection — 2 instances

Credential-harvesting login form (email + password) on cloud-storage bucket hosting

Generic 'Webmail - Login' page mimicking a legitimate service without owning that brand

Unranked / zero-reputation shared cloud-storage tenant domain

External domain 'alphatrade-options.com' associated with the page context

Domain age information unavailable

Details

Page Title

Webmail - Login

Scan Type

public

Domain Name Analysis

You're looking at domain 'pub-f3b9586fd69a40fab3c14f8b90d9a5bd.r2.dev' on the developer-focused generic top-level domain (.dev); it also runs on subdomain 'pub-f3b9586fd69a40fab3c14f8b90d9a5bd'. The core label 'r2' covers 2 characters holding zero vowels versus 1 consonant; it also includes 1 digit. Breaking it apart gives 2 words: r, 2. Expect 1 character per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.50s

Total Load Time

106 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:71 chars

Detector Agreement:100%

Website Classification

Primary Category

news media journalism57% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

news media journalism

57%

government public service

49%

technology software

43%

healthcare medical

41%

documentation technical

38%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	104.18.54.45Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	151.101.193.155Fastly · CDN	United States	AS54113Fastly, Inc.
0	143.204.181.118Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
0	172.217.117.4Google · CDN	United States	AS15169Google LLC
0	208.91.114.103	Coquitlam, British Columbia, Canada	AS40934Fortinet Inc.
0	156.226.121.244	Seychelles	AS135097LUOGELANG (FRANCE) LIMITED
0	104.18.50.34Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	151.101.129.155Fastly · CDN	United States	AS54113Fastly, Inc.
0	143.204.181.35Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
6	9	-	-