Security Report: pub-21d07aad6c444724a4f9574677900cde.r2.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f21184de-8c4a-4f26-8691-856e327aae49 Domain and IP registration (RDAP)/api/v1/rdap/f21184de-8c4a-4f26-8691-856e327aae49 Certificate Transparency/api/v1/ct/pub-21d07aad6c444724a4f9574677900cde.r2.dev How often this domain was scanned/api/v1/domain/stats/pub-21d07aad6c444724a4f9574677900cde.r2.dev Scan history for this domain/api/v1/domain/history/pub-21d07aad6c444724a4f9574677900cde.r2.dev?limit=15

This website contacted 4 IPs in 3 countries across 5 domains to perform 5 HTTP transactions. The main domain is and was registered 4 years 1 month ago.

Submitted URL: https://pub-21d07aad6c444724a4f9574677900cde.r2.dev/gaat.html

Effective URL:

blob:https://pub-21d07aad6c444724a4f9574677900cde.r2.dev/941184fd-82fb...

Redirected

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

The site impersonates American Express with credential‑harvesting forms on an unrelated, unranked domain, indicating a high‑risk phishing scam.

Risk Factors (4)

Brand impersonation of a major financial institution

Unranked / low‑reputation domain

Use of blob: URL scheme (often used by phishing kits)

Domain age information unavailable

Details

Page Title

Scan Type

public

Favicon Hash

MMH3: -386778443

MD5: 974ccc6c4c6e1c7f04606973beb3ba20

Domain Name Analysis

You're looking at domain 'pub-21d07aad6c444724a4f9574677900cde.r2.dev' on the developer-focused generic top-level domain (.dev); it also runs on subdomain 'pub-21d07aad6c444724a4f9574677900cde'. The core label 'r2' covers 2 characters containing zero vowels alongside 1 consonant; it also includes 1 digit. Segmentation suggests 2 words: r, 2. Average segment length settles at one character. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.09s

Total Load Time

379 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:4,114 chars

Detector Agreement:100%

Website Classification

Primary Category

adult content41% confidence

Type: webapp

Method: ml+structural

All Detected Categories

adult content

41%

government public service

36%

finance banking

26%

social_media

25%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	23.222.81.192	Hamburg, Free and Hanseatic City of Hamburg, Germany	AS16625Akamai Technologies, Inc.
1	104.18.50.34Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	23.227.39.200	Ottawa, Ontario, Canada	AS13335Cloudflare, Inc.
1	23.52.181.182	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
5	4	-	-