Security Scan Report: pub-e5748588f20f4fcc9a07ee3482f44c67.r2.dev

Submitted: Oct 11, 2026, 1:54:04 AMCompleted: Oct 11, 2026, 1:54:40 AMpubliccompleted

This website contacted 12 IPs in 1 country across 8 domains to perform 12 HTTP transactions. The main domain is pub-e5748588f20f4fcc9a07ee3482f44c67.r2.dev and was registered 14 years ago.

Submitted URL: https://pub-e5748588f20f4fcc9a07ee3482f44c67.r2.dev/59e1b1a120e40bf6e388a325ccb3c1a8.html

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Hash-named HTML on an anonymous R2 bucket containing a mass-mailing phishing lure ('sign-in access expiring') plus hex-obfuscated JavaScript flagged HIGH by IDS. No form is rendered, but the page is a phishing delivery artifact - avoid and report.

Risk Factors (4)
Phishing lure text with mail-merge placeholders for mass credential harvesting
Obfuscated JavaScript (hex encoding of document.write/unescape/fromCharCode) flagged as HIGH by network IDS
Hosted on an anonymous Cloudflare R2 public bucket under a random-hash filename
Unranked, no reputation, no legitimate branding or site structure
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain name 'pub-e5748588f20f4fcc9a07ee3482f44c67.r2.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'pub-e5748588f20f4fcc9a07ee3482f44c67'. The second-level label 'r2' is 2 characters long containing zero vowels alongside one consonant, notching one digit. Breaking it apart gives 2 words: r, 2. Average segment length settles at one character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pub-e5748588f20f4fcc9a07ee3482f44c67.r2.dev/59e1b1a120e40bf6e388a325ccb3c1a8.html

Page Load Overview

2.17s
Total Load Time
283 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,187 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network89% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

social media network
89%
government public service
31%
real estate property
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1104.18.54.45Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.250.154.95Google · CDNUnited States
AS15169Google LLC
1151.101.1.155Fastly · CDNUnited States
AS54113Fastly, Inc.
1142.251.110.95Google · CDNUnited States
AS15169Google LLC
1104.21.27.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10.0.0.1United StatesUnknown
1151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
1172.67.142.245Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1212--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1892227B83502D18FB83F4BBFFE942E4462841EABD4CC9F0511D886AD26FC38666159D7

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:HPzEoJeB0f/4la3EK5q3+reh398hWHdjdf9xDHacphtJDJe:bEi/kK5qOAFx1x9ntJDY

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:9948:cUdHzEQHtQHQgAHUIErKkAEcFk0wjAC+JEXAUwykA1ISBCgMgVdoRIUlEEAUEgAKiGAIEskOCkKEjjjIpyujsAGDilGE3CET

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:feffffffffffffff
Perceptual Hash:d555555555555554
Difference Hash:0000000000000000
Wavelet Hash:0e0e0e0e0e0e0e0e
Color Hash:#3a5278

Other Hashes

Crop Resistant:0000000000000000

Scan History

Scan history not available

Unable to load historical scan data