Security Report: pub-76926b15ba344a7b814330c83cca1f62.r2.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/50b1e5c8-9419-40c9-be58-73655f00613c Domain and IP registration (RDAP)/api/v1/rdap/50b1e5c8-9419-40c9-be58-73655f00613cHow often this domain was scanned/api/v1/domain/stats/pub-76926b15ba344a7b814330c83cca1f62.r2.dev Scan history for this domain/api/v1/domain/history/pub-76926b15ba344a7b814330c83cca1f62.r2.dev?limit=15

This website contacted 2 IPs in 2 countries across 2 domains to perform 2 HTTP transactions. The main domain is r2.dev and was registered 4 years 2 months ago.

Submitted URL: https://pub-76926b15ba344a7b814330c83cca1f62.r2.dev/mail.com/home.html

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Phishing kit on a Cloudflare R2 bucket impersonating Mail.com; its login form sends entered email and password to redirectingtothemainpage.com. Do not enter credentials.

Risk Factors (5)

Credential harvesting form (email + password) on a non-official domain

Cross-origin credential submission to redirectingtothemainpage.com

Brand impersonation of Mail.com on a cloud-storage bucket hostname

Hidden redirect parameters (goto, gotoparams) consistent with a phishing kit

Unranked, unattributable hosting namespace

Domain age information unavailable

Details

Page Title

Scan Type

public

Favicon Hash

MMH3: 586642709

MD5: 77a9e5007815d923a4964a507953bd2c

Domain Name Analysis

You're looking at domain 'pub-76926b15ba344a7b814330c83cca1f62.r2.dev' on the developer-focused generic top-level domain (.dev); it also runs on subdomain 'pub-76926b15ba344a7b814330c83cca1f62'. Its registrable label 'r2' stretches across 2 characters containing zero vowels alongside one consonant, notching one digit. Segmentation suggests 2 words: r, 2. Median word length comes out to 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Gailcom Sign in to update your account Login SSLv Email address Email address Password Password ©2023 Mall.com

Page Load Overview

0.36s

Total Load Time

96 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:103 chars

Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping52% confidence

Type: webapp

Method: ml+structural+ocr_tiebreaker

All Detected Categories

e-commerce shopping

52%

news media journalism

35%

finance banking

32%

documentation technical

31%

technology software

26%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	104.18.54.45Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	23.209.208.242Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
2	2	-	-