Security Scan: Redirect Page

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/60d142cf-a396-4dd2-9834-2d044d01b4ed Domain and IP registration (RDAP)/api/v1/rdap/60d142cf-a396-4dd2-9834-2d044d01b4ed Certificate Transparency/api/v1/ct/ipfs.io How often this domain was scanned/api/v1/domain/stats/pub-97d81164a43d4f2cbd351f99b807b42c.r2.dev Scan history for this domain/api/v1/domain/history/pub-97d81164a43d4f2cbd351f99b807b42c.r2.dev?limit=15

This website contacted 6 IPs in 1 country across 4 domains to perform 14 HTTP transactions. The main domain is ipfs.io and was registered 6 years ago.

Submitted URL: https://pub-97d81164a43d4f2cbd351f99b807b42c.r2.dev/index.html?email=andyw

Effective URL:

https://ipfs.io/ipfs/bafkreifxmu3rysevg2rk5mitmva4ysbevmnuqi333cijm47h...

Redirected

AI Security Verdict

Moderate Risk

Confidence: 55%

Risk Score

Contentless tracked redirect from a Cloudflare R2 bucket to IPFS carrying an email parameter. No forms, no impersonation, no malware indicators found — but the destination is unverifiable and unmoderatable, so treat with caution.

Risk Factors (4)

Deliberately contentless redirect chain ending on unmoderatable IPFS storage

Email/recipient parameter passed through the redirect, consistent with a bulk-campaign link

No verifiable ownership, branding, or purpose for the destination page

Hosting on a free/instant cloud-storage bucket means the actual age and author of the page are unknown despite the platform's old registration date

Safety Factors (6)

No forms of any kind: 0 password fields, 0 payment fields, 0 email fields

No credential exfiltration and no cross-origin JavaScript network targets

No Indicators of Compromise matched against the page or its resources

No JavaScript malware / YARA patterns and no known phishing kit in the roster

No brand impersonation — no third-party brand is displayed or claimed

Bot-protection mismatch (scanner saw a challenge page, client saw 'Redirect Page') is ordinary Cloudflare behaviour, not treated as evasion

Domain age information unavailable

Details

Page Title

Redirect Pageother network

Scan Type

public

Domain Name Analysis

Domain 'pub-97d81164a43d4f2cbd351f99b807b42c.r2.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'pub-97d81164a43d4f2cbd351f99b807b42c'. The second-level label 'r2' is 2 characters long holding 0 vowels versus one consonant, along with 1 digit. Segmentation suggests 2 words: r, 2. The median word length lands at 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.60s

Total Load Time

946 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:27 chars

Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence

Type: static

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	104.18.50.34Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	209.94.90.1	United States	AS40680Protocol Labs
2	104.18.94.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	185.199.111.153Fastly · CDN	United States	AS54113Fastly, Inc.
2	185.199.109.153Fastly · CDN	United States	AS54113Fastly, Inc.
2	104.18.95.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
14	6	-	-