Security Scan Report: pub-4e9d559e11c54314b7639d20c3d13682.r2.dev

Submitted: Jul 8, 2026, 7:50:39 PMCompleted: Jul 8, 2026, 7:53:57 PMpubliccompleted
Loading additional data...

Summary

This website contacted 11 IPs in 2 countries across 9 domains to perform 21 HTTP transactions. The main domain is pub-4e9d559e11c54314b7639d20c3d13682.r2.dev and was registered NaN years ago.

Submitted URL: https://pub-4e9d559e11c54314b7639d20c3d13682.r2.dev/doc8.html

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

The site mimics a DocuSign login page but lacks forms; brand impersonation and many redirects make it moderately risky.

Risk Factors
Brand impersonation of a well‑known service
Excessive cross‑domain redirects
Unranked / low‑reputation domain
Domain age information unavailable

Details

Page Title

DocuSign Login - Enter your password to sign in

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

Domain 'pub-4e9d559e11c54314b7639d20c3d13682.r2.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'pub-4e9d559e11c54314b7639d20c3d13682'. The second-level label 'r2' is 2 characters long holding 0 vowels versus one consonant, plus one digit. Breaking it apart gives two words: r, 2. Average segment length settles at one character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pub-4e9d559e11c54314b7639d20c3d13682.r2.dev/doc8.html

Page Load Overview

1.89s
Total Load Time
21
HTTP Requests
9
Domains
640 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:557 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11141.193.213.20United States
AS209242Cloudflare London, LLC
1172.64.147.160Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.67.73.239Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.26.4.47Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.40.96Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.64.152.231Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1192.178.183.95Google · CDNUnited States
AS15169Google LLC
1170.114.78.89United States
AS209242Cloudflare London, LLC
1104.18.54.45Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1185.111.111.157Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
2111--

Page Statistics

21
Requests
9
Unique Domains
1.5 MB
Total Size

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AB448A3249239C2708DED5C7591D6FDA7FA4CDCB46316223B07C818CA791AF22D9A25F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:gajpSYt72uB8zd3nuatHiuZ1aYxs7TA7VmserIxzFJkzFuOtbXf5n:ga1SYtRc33CMaoQTA7Vmserr

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:256338:pKCAdKAaAKAFBUzMawGIociASAAkSBMqC0zC4ACLwHIgWIKAAQhAIAokEqCwJwwkiNADAkoKVHgAQC0EAQhBCwuYCFaCEMGV

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7ffff7efe7e7e7ff
Perceptual Hash:a6998c66999966cd
Difference Hash:883228484d4d0890
Wavelet Hash:7f3c342424243dfe
Color Hash:#d46ce0

Other Hashes

Crop Resistant:883228484d4d0890

Scan History

Scan history not available

Unable to load historical scan data