Security Scan: Redirect Page

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/54f1571c-eed4-4078-b228-76c86a520854 Domain and IP registration (RDAP)/api/v1/rdap/54f1571c-eed4-4078-b228-76c86a520854 Certificate Transparency/api/v1/ct/ipfs.io How often this domain was scanned/api/v1/domain/stats/pub-97d81164a43d4f2cbd351f99b807b42c.r2.dev Scan history for this domain/api/v1/domain/history/pub-97d81164a43d4f2cbd351f99b807b42c.r2.dev?limit=15

This website contacted 7 IPs in 1 country across 4 domains to perform 13 HTTP transactions. The main domain is r2.dev and was registered 4 years 1 month ago.

Submitted URL: https://pub-97d81164a43d4f2cbd351f99b807b42c.r2.dev/index.html?email=andyw

Effective URL:

https://ipfs.io/ipfs/bafkreifxmu3rysevg2rk5mitmva4ysbevmnuqi333cijm47h...

Redirected

AI Security Verdict

Low Risk

Confidence: 60%

Risk Score

Cloud-storage URL redirecting to an IPFS gateway that served only a Cloudflare bot-verification page. No forms, no threat-intel or malware hits. Opaque hosting warrants caution, but no concrete malicious signal was found.

Risk Factors (4)

Entry point is an anonymous public Cloudflare R2 bucket (pub-97d81164a43d4f2cbd351f99b807b42c.r2.dev) redirecting into an IPFS gateway, with an email-style query parameter — opaque hosting/source

IPFS/IPFS-gateway delivery is commonly abused for hosting phishing and malware; content addressed inline is unverified and can change

Domain age for the scored host is effectively unknown (shared-hosting tenant); the 4532-day figure belongs to the r2.dev platform, not this page

Page host is not ranked in Cisco Umbrella — weak prior only, carries no weight on its own

Safety Factors (4)

No credential, login, payment or disguised password fields anywhere in the captured DOM

No Indicators of Compromise and no JavaScript malware matches

The visible page is a standard Cloudflare Turnstile bot-protection interstitial ('Verify you are human') loading cloudflare-turnstile, a legitimate bot-protection module

No cross-origin form submissions and no credential exfiltration detected

Domain age information unavailable

Details

Page Title

Redirect Pageother network

Scan Type

public

Domain Name Analysis

The domain 'pub-97d81164a43d4f2cbd351f99b807b42c.r2.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'pub-97d81164a43d4f2cbd351f99b807b42c'. The registrable portion 'r2' spans 2 characters containing 0 vowels alongside one consonant, plus one digit. Segmentation suggests 2 words: r, 2. Median word length is one character. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.44s

Total Load Time

966 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-us

Text Length:368 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software76% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

76%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	104.18.50.34Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	209.94.90.1	United States	AS40680Protocol Labs
1	104.18.95.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	185.199.110.153Fastly · CDN	United States	AS54113Fastly, Inc.
1	104.18.94.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	185.199.108.153Fastly · CDN	United States	AS54113Fastly, Inc.
1	185.199.109.153Fastly · CDN	United States	AS54113Fastly, Inc.
13	7	-	-