Security Scan Report: pub-8e34ba5d87084c3f9c5d2a23075f50b3.r2.dev

Submitted: Completed: publiccompleted
This website contacted 6 IPs in 3 countries across 4 domains to perform 16 HTTP transactions. The main domain is r2.dev and was registered 4 years 2 months ago.

Submitted URL: https://pub-8e34ba5d87084c3f9c5d2a23075f50b3.r2.dev/dkmfile.html

AI Security Verdict

Confirmed Scam

Confidence: 85%

9
Risk Score

Random Cloudflare R2 bucket hosts a cPanel-style webmail login with a password field and cPanel branding on an unofficial domain; this is a credential-phishing page. Avoid entering credentials.

Risk Factors (5)
Credential-harvesting password field hosted on cloud storage
Brand impersonation of cPanel webmail interface on an unofficial domain
Random Cloudflare R2 public bucket hosting a login page
Four cross-domain redirects
External webmail domain referenced from a disposable-looking R2 URL
Domain age information unavailable

Details

Page Title

Webmail Login

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'pub-8e34ba5d87084c3f9c5d2a23075f50b3.r2.dev' is registered, featuring subdomain 'pub-8e34ba5d87084c3f9c5d2a23075f50b3'. Count 2 characters in 'r2' with zero vowels and 1 consonant; bonus characters include one digit. Tokenizing the label suggests 2 words: r, 2. Median word length is 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Webrnai/ Email Address Enter your email address. Password Enter your email password. English aul = Gonrapexm =» eStina = dansk = Deutsch = EAAnviKa «espaol was <P Copyright© 2024 Panel LLC vay...

Page Load Overview

7.25s
Total Load Time
152 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,043 chars
Detector Agreement:100%

Website Classification

Primary Category

real estate property54% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

real estate property
54%
technology software
38%
government public service
31%
corporate business
28%
entertainment media
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6104.18.54.45Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2190.183.195.2Bella Vista, Corrientes, Argentina
AS20207Gigared S.A.
25.101.109.44Frankfurt am Main, Hesse, Germany
AS14061DigitalOcean, LLC
2151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
2104.18.50.34Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2151.101.1.155Fastly · CDNUnited States
AS54113Fastly, Inc.
166--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D482B512E4F80992016B44D959F255182FAD932BCA078E49F07E8BF85F9BF8DD87721C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:WyEiRELD/ZmXg8oWllefEJkcYdSa7vyl7mtENEvFUGyeEUQ9Dv6DiwCjro8jroFU:iiRWD/ZmXg8ScCyliuNEvyF56Di0U

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:17626:ADlDlUICCTIA6ZIQAJ0UQIKWUqEk8gRRJoLCBSTAdNEEkAAk5KGoDVhgECK0hGQEwhtAAASCJMJyh7qFDBAkQJIlKYAIKYCE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7e7e7e7e7ffff
Perceptual Hash:b333cccc66269999
Difference Hash:0c0c080c14080000
Wavelet Hash:3c242424c0e4cccc
Color Hash:070000180c0

Other Hashes

Crop Resistant:0c0c080c14080000

Scan History

Scan history not available

Unable to load historical scan data