ScanMalware.com

Security Scan Report: pub-1735e6cb161e49a7925d5e84c1a4f75e.r2.dev

Submitted: Sep 30, 2026, 6:52:12 AMCompleted: Sep 30, 2026, 6:53:02 AMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

Empty 'Login'-titled page on an anonymous Cloudflare R2 public bucket. No forms, no malware, no threat-intel or Indicator of Compromise hits — but unknown page age, unranked host and disposable-bucket hosting warrant caution.

Risk Factors (3)
Login-themed page hosted on an anonymous public cloud-storage bucket
Effective domain age unknown (shared-hosting tenant; apex age not attributable)
Unranked / no domain reputation
Safety Factors (6)
No threat-intelligence Indicators of Compromise matched the page or its resources
No JavaScript malware (YARA) patterns detected
No native-YARA high-precision hits and no known malicious kit in the roster
Zero forms, zero password fields, zero payment fields — the verified DOM shows no credential or payment collection
No cross-origin form submission, no credential exfiltration, no third-party script hosts
Verdict names no specific threat, and DOM analysis found no password field (real or disguised) or payment field and no other hard signal — elevated score unsupported; risk adjusted from 4 to 4
Domain age information unavailable

Details

Page Title

Login

Scan Type

public

Domain Name Analysis

You're looking at domain 'pub-1735e6cb161e49a7925d5e84c1a4f75e.r2.dev' on the developer-focused generic top-level domain (.dev); it also runs on subdomain 'pub-1735e6cb161e49a7925d5e84c1a4f75e'. Its registrable label 'r2' stretches across 2 characters split between 0 vowels and 1 consonant, notching one digit. Splitting it apart reveals two words: r, 2. Median word length is one character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pub-1735e6cb161e49a7925d5e84c1a4f75e.r2.dev/indexjs.html

Page Load Overview

0.84s
Total Load Time
27 KB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

Text Length:5 chars
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2104.18.50.34Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
123.185.0.3Fastly · CDNUnited States
AS54113Fastly, Inc.
1104.18.54.45Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
43--

Detected Technologies3

Cloudflare Bot Management
40%
Cloudflare
40%
jQuery
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T184F0C0A35CC5C90EA220C3E08CD0F414875AE515E1888D8AF2DC61AE0BC0FCDDCD791C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:haxxQrYfU+1cuI/QUu5JqJmWDbrVM3qJmWDLVObxLq:haks8+HI/i5invVMMnLVH

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:568:AAgAAAAAAAAAEAAAAAAgAQAAAAAAAAAACAAAAEAAIAAAAAAAACAAAAkAAAAAAAAAgAAAAAgAAAAAAAAAAAAAAAAAAAAAAAIA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data