# pub-735053a4f94644cb81eb8a9ea49c452f.r2.dev — MALICIOUS

> pub-735053a4f94644cb81eb8a9ea49c452f.r2.dev is a crypto drainer site flagged by 18/95 VirusTotal scanners. Verify on PhishDestroy before interacting.

## Summary
PhishDestroy identifies pub-735053a4f94644cb81eb8a9ea49c452f.r2.dev as a high-risk crypto drainer domain designed to steal cryptocurrency from unsuspecting users through deceptive transactions.  

This domain was flagged by 18 out of 95 VirusTotal security vendors, and it is blocked by multiple threat intelligence feeds including OpenPhish, PhishingArmy, and OISD. It is also flagged by Google Safe Browsing for social engineering. The domain resolves to IP address 104.18.50.34 and uses a Let's Encrypt SSL certificate. Registered through Cloudflare, this domain appears to have been created recently and is actively distributing malicious payloads.  

If you visited pub-735053a4f94644cb81eb8a9ea49c452f.r2.dev, disconnect from the internet immediately. Do not authorize any crypto transactions or enter personal information. Use PhishDestroy to scan your device for malware and revoke any unauthorized crypto wallet connections. If you transferred funds, contact your wallet provider and local cybercrime authorities immediately.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 104.18.50.34

## Detection Status
- VirusTotal: 18 vendors flagged
- Google Safe Browsing: FLAGGED
- Blocklists: 3 hits
  Lists: ["OpenPhish", "PhishingArmy", "OISD"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/9c3ae023-997c-430d-905b-1b77d3b15b24
- PhishDestroy: https://phishdestroy.io/domain/pub-735053a4f94644cb81eb8a9ea49c452f.r2.dev/
- LLM endpoint: https://phishdestroy.io/domain/pub-735053a4f94644cb81eb8a9ea49c452f.r2.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/pub-735053a4f94644cb81eb8a9ea49c452f.r2.dev/
Last updated: 2026-03-27