Security Scan: Credentials

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7af2d41b-b3ea-4999-9772-6f69f2376aa5 Domain and IP registration (RDAP)/api/v1/rdap/7af2d41b-b3ea-4999-9772-6f69f2376aa5 Certificate Transparency/api/v1/ct/pub-d44e201c1f3e400586cb81b0f2d48f61.r2.dev How often this domain was scanned/api/v1/domain/stats/pub-d44e201c1f3e400586cb81b0f2d48f61.r2.dev Scan history for this domain/api/v1/domain/history/pub-d44e201c1f3e400586cb81b0f2d48f61.r2.dev?limit=15

This website contacted 6 IPs in 1 country across 11 domains to perform 21 HTTP transactions. The main domain is pub-d44e201c1f3e400586cb81b0f2d48f61.r2.dev and was registered 4 years 1 month ago.

Submitted URL: http://pub-d44e201c1f3e400586cb81b0f2d48f61.r2.dev/owasecure.htm

Effective URL:

https://pub-d44e201c1f3e400586cb81b0f2d48f61.r2.dev/owasecure.htm

Redirected

AI Security Verdict

High Risk

Confidence: 82%

Risk Score

Page hosts credential‑collecting forms, flagged by Safe Browsing and critical IDS alerts; treat as high‑risk phishing.

Risk Factors

Unranked domain with credential collection

Social Engineering Safe Browsing warning

Critical and High IDS alerts indicating possible shellcode and obfuscation

Form action points to external Google service (potential exfiltration path)

Presence of password fields without clear legitimate purpose

Domain age information unavailable

Details

Page Title

Credentials

Scan Type

public

Domain Name Analysis

Domain 'pub-d44e201c1f3e400586cb81b0f2d48f61.r2.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'pub-d44e201c1f3e400586cb81b0f2d48f61'. The core label 'r2' covers 2 characters holding zero vowels versus one consonant; bonus characters include one digit. Tokenizing the label suggests two words: r, 2. Average segment length settles at 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.51s

Total Load Time

458 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:50%

Script:Latin

Direction:ltr

Detection Details

Text Length:691 chars

Detector Agreement:100%

Website Classification

Primary Category

other95% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

other

95%

legitimate website

80%

suspicious phishing

73%

e-commerce

70%

malicious

64%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	151.101.1.155Fastly · CDN	United States	AS54113Fastly, Inc.
3	104.18.50.34Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	104.18.11.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.127.139Google · CDN	United States	AS15169Google LLC
3	142.250.154.95Google · CDN	United States	AS15169Google LLC
3	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
21	6	-	-