Security Scan: Secure Voice Playback

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8db4dcbc-0ae2-4a27-a4a0-eb9dfed61720 Domain and IP registration (RDAP)/api/v1/rdap/8db4dcbc-0ae2-4a27-a4a0-eb9dfed61720 Certificate Transparency/api/v1/ct/pub-72d8cc6588b945a8b92bcdfd75f82472.r2.dev How often this domain was scanned/api/v1/domain/stats/pub-72d8cc6588b945a8b92bcdfd75f82472.r2.dev Scan history for this domain/api/v1/domain/history/pub-72d8cc6588b945a8b92bcdfd75f82472.r2.dev?limit=15

This website contacted 6 IPs in 2 countries across 3 domains to perform 4 HTTP transactions. The main domain is pub-72d8cc6588b945a8b92bcdfd75f82472.r2.dev and was registered 17 years ago.

Submitted URL: https://pub-72d8cc6588b945a8b92bcdfd75f82472.r2.dev/end40.html?omnisendContactID=6785812a34625d604748dcd4&utm_campaign=campaign%3A+gtr+%28678586ddff61281c4293fe93%29&utm_medium=email&utm_source=omnisend

AI Security Verdict

High Risk

Confidence: 88%

Risk Score

Fake Microsoft 'voicemail playback' page hosted on a Cloudflare R2 bucket, flagged by Google Safe Browsing for Social Engineering and harvesting victim email addresses. Avoid interaction.

Risk Factors (5)

Google Safe Browsing Social Engineering detection on the scanned URL

Impersonation of Microsoft branding on a Cloudflare R2 storage bucket with no affiliation to Microsoft

Email-address capture page framed as a secure voicemail playback system

Obfuscated delivery via email marketing UTM/contact-ID tracking parameters (omnisend campaign)

Unranked domain (not in Cisco Umbrella top 1M) with apex age belonging to the platform, not this page

Domain age information unavailable

Details

Page Title

Secure Voice Playback

Scan Type

public

Domain Name Analysis

You're looking at domain 'pub-72d8cc6588b945a8b92bcdfd75f82472.r2.dev' on the developer-focused generic top-level domain (.dev); it also runs on subdomain 'pub-72d8cc6588b945a8b92bcdfd75f82472'. The second-level label 'r2' is 2 characters long with zero vowels and one consonant, plus one digit. Splitting it apart reveals 2 words: r, 2. Expect one character per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.08s

Total Load Time

43 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:128 chars

Detector Agreement:50%

Website Classification

Primary Category

technology software43% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

43%

entertainment media

29%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	104.18.54.45Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	23.207.210.132Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
0	104.18.50.34Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	2.21.239.135Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
4	6	-	-