Security Scan: https://pub-95759530727242b6a89325edaebd413b.

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b8ded006-f194-4f55-a50a-dcf611057178 Domain and IP registration (RDAP)/api/v1/rdap/b8ded006-f194-4f55-a50a-dcf611057178How often this domain was scanned/api/v1/domain/stats/pub-95759530727242b6a89325edaebd413b.r2.dev Scan history for this domain/api/v1/domain/history/pub-95759530727242b6a89325edaebd413b.r2.dev?limit=15

This website contacted 5 IPs in 1 country across 3 domains to perform 12 HTTP transactions. The main domain is r2.dev and was registered 4 years 2 months ago.

Submitted URL: https://pub-95759530727242b6a89325edaebd413b.r2.dev/shareplntmicroformshareldokfindex6.html

AI Security Verdict

Moderate Risk

Confidence: 66%

Risk Score

Anonymous R2 bucket serving a fake 'verify you are human' gate with IDS-flagged obfuscated JavaScript and eval() calls; no forms, but the cloaked challenge-page pattern warrants avoiding it.

Risk Factors (4)

Obfuscated JavaScript flagged by network IDS (HIGH severity) alongside eval() usage

Fake human-verification / captcha gate with garbled, non-functional text

Hosted on an anonymous public R2 bucket; apex age is the platform's, not this page's — page age unknown

Randomized spam-like filename and no legitimate site identity

Safety Factors (5)

No forms at all: 0 password, 0 disguised-password, 0 payment fields (no credential or payment harvesting observed)

No cross-origin form submissions or detected credential exfiltration

No Indicators of Compromise matches and no YARA malware patterns detected

Turnstile WebAssembly module originates from the legitimate Cloudflare challenges domain

No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'pub-95759530727242b6a89325edaebd413b.r2.dev' is registered and includes subdomain 'pub-95759530727242b6a89325edaebd413b'. The core label 'r2' covers 2 characters with zero vowels and 1 consonant, along with 1 digit. Breaking it apart gives 2 words: r, 2. Median word length is one character. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.05s

Total Load Time

1.4 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:64%

Script:Latin

Direction:ltr

Detection Details

Text Length:58 chars

Detector Agreement:100%

Website Classification

Primary Category

healthcare medical68% confidence

Type: static

Method: ml+structural

All Detected Categories

healthcare medical

68%

news media journalism

49%

adult content

38%

government public service

35%

education learning

29%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	104.18.50.34Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.250.154.95Google · CDN	United States	AS15169Google LLC
2	104.18.95.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.94.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.54.45Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
12	5	-	-