Security Scan Report: pub-87d66414183345baaa06b7793685d440.r2.dev

Submitted: Oct 15, 2026, 9:55:36 AMCompleted: Oct 15, 2026, 9:57:41 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

Analyst-vetted phishing gate loader: YARA-confirmed Turnstile-gate kit on an anonymous R2 bucket, hiding a base64 next-stage URL behind a fake Cloudflare verification screen.

Risk Factors (4)
Known phishing kit loader identified by YARA and the analyst-vetted kit roster
Obfuscated next-stage redirect via base64 hidden input (b64u)
Mimics a Cloudflare 'Verifying site connection' Turnstile interstitial
Hosted on an anonymous cloud-storage bucket with no ranking or content
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'pub-87d66414183345baaa06b7793685d440.r2.dev' is registered with subdomain 'pub-87d66414183345baaa06b7793685d440'. The core label 'r2' covers 2 characters split between 0 vowels and 1 consonant; it also includes one digit. Segmentation suggests 2 words: r, 2. Median word length is one character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pub-87d66414183345baaa06b7793685d440.r2.dev/link-3.html

Page Load Overview

75.09s
Total Load Time
0 KB
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

0
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3104.18.54.45Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0103.224.212.214Australia
AS133618Trellian Pty. Limited
0185.53.179.200Germany
AS206834Team Internet AG
0104.18.50.34Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
34--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T186D022E7BA94CC201940FCF03481802C802D659D698348A506C0261A6E842AF18025E8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6:qzxO966qerpqqeymoj99lXbvAhS2WEKBoOI:kxPrerpek99lLT2WEwI

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:ad59508165a3d0418069f787bf3d5e45

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data