ScanMalware.com

Security Scan Report: r2uploader-cyw.pages.dev

Redirected to:
https://r2uploader-cyw.pages.dev/
Site favicon
Submitted: Jul 8, 2026, 6:01:34 PMCompleted: Jul 8, 2026, 6:02:52 PMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 1 country across 3 domains to perform 5 HTTP transactions. The main domain is r2uploader-cyw.pages.dev and was registered NaN years ago.

Submitted URL: http://r2uploader-cyw.pages.dev/

Effective URL: https://r2uploader-cyw.pages.dev/Redirected

AI Security Verdict

Low Risk

Confidence: 80%

3
Risk Score

The site mimics Cloudflare branding on an unknown‑age subdomain without collecting data; treat as moderate risk.

Risk Factors
Brand impersonation of Cloudflare
Unranked / low‑reputation domain
Unknown subdomain age on a hosting platform
Safety Factors
No forms collecting credentials or payments
No JavaScript malware matches
No network IDS alerts
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 3
Domain age information unavailable

Details

Page Title

Cloudflare R2 Direct Uploader

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(66%)

Domain Information

You're looking at domain 'r2uploader-cyw.pages.dev' on the developer-focused generic top-level domain (.dev) and includes subdomain 'r2uploader-cyw'. The core label 'pages' covers 5 characters with two vowels and three consonants. Word splitting yields 1 word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://r2uploader-cyw.pages.dev/

Page Load Overview

1.34s
Total Load Time
5
HTTP Requests
3
Domains
67 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:495 chars
Detector Agreement:67%

Website Classification

Primary Category

technology software66% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
66%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2172.66.47.167Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.66.44.89Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13.167.227.85Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
54--

Detected Technologies1

jsDelivr
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T191F2D715B1B248BA3C73663D638FA11877299047D815CDA8BECD52118FC2EF89DCB798

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:L8Y8Sngig9tLnsSOfpBJxAc7oHqCzbi8lbIyS8Cmzy:fg9hnsSOfpBJx+q8bi8ZIySLmzy

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:35336:AJEZMcFEdMsQFMQyFmAFAUUSGbhHSgDAKivAZMCkgEYUdCKERCoQqyQIIAHhgmURJoKB9IIoITAiMkKwiSgWAABIpYVAIgAK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:383c3c3c3c000000
Perceptual Hash:cfc7646cce64648a
Difference Hash:6061416969040000
Wavelet Hash:3f3f3f3f3c1c0000
Color Hash:#d46ce0

Other Hashes

Crop Resistant:6061416969040000

Scan History

Scan history not available

Unable to load historical scan data