Security Scan Report: pub-3824b55e251e4855b75a1be713f7f1cb.r2.dev

Submitted: Jul 22, 2026, 10:50:27 PMCompleted: Jul 22, 2026, 10:53:48 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Anonymous r2.dev bucket serving an analyst-vetted Turnstile 'Verifying site connection...' phishing-gate loader (YARA: Turnstile_Gate_Kit_ScPhp_Loader) with a base64 hidden next-stage URL. No forms on this hop, but it is a known malicious kit front end — avoid.

Risk Factors (4)
Known malicious phishing-kit loader detected by vetted YARA rule and kit roster
Base64-obfuscated next-stage URL hidden in the page (b64u input)
Cross-origin loader script from an admin/js/sc.php path on a third-party domain
Anonymous cloud-storage bucket subdomain, unranked and with no legitimate site content
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain 'pub-3824b55e251e4855b75a1be713f7f1cb.r2.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'pub-3824b55e251e4855b75a1be713f7f1cb'. Count 2 characters in 'r2' holding 0 vowels versus 1 consonant, notching one digit. It segments into 2 words: r, 2. Median word length is one character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pub-3824b55e251e4855b75a1be713f7f1cb.r2.dev/lxdoc.html

Page Load Overview

1.01s
Total Load Time
27 KB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

0
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3104.18.54.45Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
31--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E5D023E6BF54DD628D007CD134C2C14C453911857AF0895436C05B1597001AF5D53754

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3:qVZxQXbZ6i/aAqNMBBAiqzRSpqqe9PoV/zf5ja8YlLd4bzbvTKZh77+FWkNt9Kht:qzxO966qerpqqeW7f0bWfbvTE7+BoOI

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:b372cd048fd0617ebc36f0a6fb8fa380

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data