Suspected phishing site | Cloudflare

phishing scam

technology software

English

The domain 'pub-8ba7461f5207425c91fbb56be2fffac1.r2.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'pub-8ba7461f5207425c91fbb56be2fffac1'. Count 2 characters in 'r2' containing 0 vowels alongside 1 consonant, notching one digit. Splitting it apart reveals 2 words: r, 2. Average segment length settles at one character. No strong language cues emerged from the frequency lists.

html/af/a4/afa4b626-797a-4c02-ac00-1fea57d52fca.html.gz

50e878a18b2b5be7071dc7c10297381bcfcb55f17c27760ee857af9e31133324

275407540ae2d5516300e4027ce994e1c97f958d464e137d0fff116d7acf0f24

3dd83a652b2e60d8dfc699cd2006f70007b826a92b49e61e9194bf422481ac05

robots

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/


  if (!navigator.cookieEnabled) {
    window.addEventListener('DOMContentLoaded', function () {
      var cookieEl = document.getElementById('cookie-alert');
      cookieEl.style.display = 'block';
    })
  }


Cloudflare Bot Management

Cloudflare

☠️ Malicious - https://pub-8ba7461f5207425c91fbb56be2fffac1.r2.dev/index.html

Requests	IP Address	Location	AS Autonomous System
4	104.18.50.34	United States	AS13335CLOUDFLARENET
1	104.18.54.45	United States	AS13335CLOUDFLARENET
1	2606:4700:3113::6812:362d	United States	AS13335CLOUDFLARENET
1	2606:4700:3117::6812:3222	United States	AS13335CLOUDFLARENET
4	4	-	-

Security Scan Report: pub-8ba7461f5207425c91fbb56be2fffac1.r2.dev

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Primary Scan Blocked — Fallback Capture Shown

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies2

Content Similarity HashesFor malware variant detection

Image Hashes

Perceptual Hashes

Other Hashes

Scan History