Security Report: pub-565a23beb28f44f5bbc6bc92c5cf97ad.r2.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/6412ff91-f714-4ad1-9422-af987f2e48ae Domain and IP registration (RDAP)/api/v1/rdap/6412ff91-f714-4ad1-9422-af987f2e48ae Certificate Transparency/api/v1/ct/pub-565a23beb28f44f5bbc6bc92c5cf97ad.r2.dev How often this domain was scanned/api/v1/domain/stats/pub-565a23beb28f44f5bbc6bc92c5cf97ad.r2.dev Scan history for this domain/api/v1/domain/history/pub-565a23beb28f44f5bbc6bc92c5cf97ad.r2.dev?limit=15

This website contacted 6 IPs in 2 countries across 4 domains to perform 12 HTTP transactions. The main domain is pub-565a23beb28f44f5bbc6bc92c5cf97ad.r2.dev and was registered 15 years ago.

Submitted URL: https://pub-565a23beb28f44f5bbc6bc92c5cf97ad.r2.dev/index.htm

AI Security Verdict

Confirmed Scam

Confidence: 82%

Risk Score

Fake 'Webmail' login mirroring earth-core.jp served from a public Cloudflare R2 bucket; harvests usernames and passwords. Do not enter credentials.

Risk Factors (3)

Credential (username/password) collection form on cloud-storage bucket hosting

Impersonation of a webmail service (earth-core.jp webmail) on a non-official domain

Unranked, non-brand domain hosting a login page

Domain age information unavailable

Details

Page Title

:: Welcome to Webmail

Scan Type

public

Favicon Hash

MMH3: -2140379067

MD5: 228ba3f6d946af4298b080e5c934487c

Domain Name Analysis

The domain 'pub-565a23beb28f44f5bbc6bc92c5cf97ad.r2.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'pub-565a23beb28f44f5bbc6bc92c5cf97ad'. The registrable portion 'r2' spans 2 characters containing 0 vowels alongside one consonant; bonus characters include 1 digit. Breaking it apart gives 2 words: r, 2. Average segment length settles at one character. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

5.51s

Total Load Time

125 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:44%

Script:Latin

Direction:ltr

Detection Details

Text Length:276 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical64% confidence

Type: webapp

Method: ml+structural

All Detected Categories

documentation technical

64%

technology software

61%

adult content

50%

news media journalism

50%

government public service

47%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	104.18.54.45Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	219.118.67.12	Japan	AS2514NTT PC Communications, Inc.
2	151.101.65.155Fastly · CDN	United States	AS54113Fastly, Inc.
2	104.18.50.34Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	151.101.1.155Fastly · CDN	United States	AS54113Fastly, Inc.
2	151.101.193.155Fastly · CDN	United States	AS54113Fastly, Inc.
12	6	-	-