technology software

documentation technical

government public service

adult content

English

The domain 'pub-f9fa31b057ef4dfd8753c30678c5d1e4.r2.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'pub-f9fa31b057ef4dfd8753c30678c5d1e4'. Count 2 characters in 'r2' split between 0 vowels and one consonant; bonus characters include 1 digit. Tokenizing the label suggests 2 words: r, 2. The median word length lands at 1 character. No strong language cues emerged from the frequency lists.

_user

_pass

html/b4/8b/b48bda62-9233-4fe2-a051-e8f610570aaf.html.gz

0a34a87842c539c1f4feec56bba982fd596b73500046a6e6fe38a22260c6577b

160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

1c53cc5f18988544cc9e2d7c5b9b48730010350fd187428a0c3903168adbf9d2

987e04fe1429653fab53dc1d3c0d45482aece77cae26d3f4a89ad43dcad9870f

2eade2e7abf47c1be93b782f00ae29e0f1c742a03375df544eea3b0dc90d2116

d0e94035c1ce740d53af947876f380d0a2fbb13200aafe2f8989ca312aba75a6

7f6d59b8e710a3fb2f7ad6c7e9a03e4037575492dc9c87fb2291d07dbc162e24

width=device-width, initial-scale=1.0, shrink-to-fit=no, maximum-scale=1.0

viewport

theme-color

msapplication-navbutton-color

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://webui-test chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types lottie-worker-script-loader webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Abuse Team

CloudFlare, Inc.

r2.dev

Abuse

Admin

Cloudflare-NOC

Cloudflare, Inc.

CLOUDFLARENET


			$(function() {
				rcmail.init();
			});
		

PasswordField

JQuery

Cloudflare Bot Management

Cloudflare

jsDelivr

cdnjs

Secure Email Messaging System

☠️ Malicious - https://pub-f9fa31b057ef4dfd8753c30678c5d1e4.r2.dev/expire_countdown.html

Requests	IP Address	Location	AS Autonomous System
3	104.18.50.34Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	172.67.68.7Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.17.208.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	5	-	-

Security Scan Report: pub-f9fa31b057ef4dfd8753c30678c5d1e4.r2.dev

Summary

AI Security Verdict

Confirmed Scam

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History