Security Scan: Mail

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a4522db7-537e-4853-a32d-e096404ed090 Domain and IP registration (RDAP)/api/v1/rdap/a4522db7-537e-4853-a32d-e096404ed090How often this domain was scanned/api/v1/domain/stats/pub-614b6a8544664ad7845f0c49488560a3.r2.dev Scan history for this domain/api/v1/domain/history/pub-614b6a8544664ad7845f0c49488560a3.r2.dev?limit=15

This website contacted 11 IPs in 1 country across 8 domains to perform 12 HTTP transactions. The main domain is r2.dev and was registered 4 years 2 months ago.

Submitted URL: https://pub-614b6a8544664ad7845f0c49488560a3.r2.dev/bins.htm

AI Security Verdict

Confirmed Scam

Confidence: 88%

Risk Score

Anonymous cloud-bucket page harvesting webmail usernames/passwords via a generic login shell, with page data POSTed to an unrelated external endpoint. Do not enter credentials.

Risk Factors (5)

Password harvesting form on anonymous cloud-storage hosting (r2.dev bucket)

Cross-origin POST of page data to an unrelated domain (atc-avaition.com/gen/re.php)

Non-standard hidden form fields (pdf1, address, email, type) consistent with a phishing kit

No identifiable legitimate webmail provider, branding or registrant behind the page

Impersonation-free 'generic webmail' login shell with no supporting site content

Domain age information unavailable

Details

Page Title

Mail

Scan Type

public

Domain Name Analysis

The domain name 'pub-614b6a8544664ad7845f0c49488560a3.r2.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'pub-614b6a8544664ad7845f0c49488560a3'. The core label 'r2' covers 2 characters holding zero vowels versus 1 consonant; bonus characters include one digit. Breaking it apart gives 2 words: r, 2. Median word length is 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.80s

Total Load Time

317 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:192 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate business49% confidence

Type: webapp

Method: ml+structural+ocr_tiebreaker

All Detected Categories

corporate business

49%

documentation technical

37%

news media journalism

35%

phishing scam

34%

government public service

33%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	104.18.50.34Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	142.251.127.95Google · CDN	United States	AS15169Google LLC
1	151.101.65.155Fastly · CDN	United States	AS54113Fastly, Inc.
1	142.250.154.95Google · CDN	United States	AS15169Google LLC
1	104.18.40.68Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.18.11.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.18.54.45Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	151.101.193.155Fastly · CDN	United States	AS54113Fastly, Inc.
1	172.64.147.188Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
12	11	-	-