Security Report: pub-d126770a7b774637ada8129a540c36e6.r2.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c8ca19db-ab0c-407c-a395-ef29ce417592 Domain and IP registration (RDAP)/api/v1/rdap/c8ca19db-ab0c-407c-a395-ef29ce417592How often this domain was scanned/api/v1/domain/stats/pub-d126770a7b774637ada8129a540c36e6.r2.dev Scan history for this domain/api/v1/domain/history/pub-d126770a7b774637ada8129a540c36e6.r2.dev?limit=15

This website contacted 10 IPs in 3 countries across 6 domains to perform 6 HTTP transactions. The main domain is r2.dev and was registered 4 years 2 months ago.

Submitted URL: https://pub-d126770a7b774637ada8129a540c36e6.r2.dev/secure/index.html

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Google Safe Browsing flags Social Engineering twice on this anonymous R2 bucket page, which presents a generic 'Webmail - Login' email/password form — a credential-phishing trap. Do not enter credentials.

Risk Factors (5)

Google Safe Browsing Social Engineering detection (2 instances) — strong phishing evidence

Email/password login form hosted on shared cloud-storage bucket, not on any mail provider's domain

Generic 'Webmail - Login' branding imitating a mail service with no identifiable legitimate operator

Anonymous, instant-publish r2.dev tenant with no attributable domain age or ownership

Unrelated third-party domain (alphatrade-options.com) present in page resources

Domain age information unavailable

Details

Page Title

Webmail - Login

Scan Type

public

Domain Name Analysis

You're looking at domain 'pub-d126770a7b774637ada8129a540c36e6.r2.dev' on the developer-focused generic top-level domain (.dev) and includes subdomain 'pub-d126770a7b774637ada8129a540c36e6'. The core label 'r2' covers 2 characters containing 0 vowels alongside 1 consonant; it also includes one digit. Word splitting yields 2 words: r, 2. Expect one character per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.99s

Total Load Time

106 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:71 chars

Detector Agreement:100%

Website Classification

Primary Category

news media journalism57% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

news media journalism

57%

government public service

49%

technology software

43%

healthcare medical

41%

documentation technical

38%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	104.18.54.45Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.18.50.34Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	151.101.65.155Fastly · CDN	United States	AS54113Fastly, Inc.
0	143.204.181.46Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
0	172.217.112.4Google · CDN	United States	AS15169Google LLC
0	208.91.114.103	Coquitlam, British Columbia, Canada	AS40934Fortinet Inc.
0	151.101.193.155Fastly · CDN	United States	AS54113Fastly, Inc.
0	143.204.181.67Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
0	172.217.118.4Google · CDN	United States	AS15169Google LLC
0	156.226.121.244	Seychelles	AS135097LUOGELANG (FRANCE) LIMITED
6	10	-	-