# pub-ef47dfdc85ad463a911b6bde06661e80.r2.dev — MALICIOUS

> Explore the phishing risk linked to pub-ef47dfdc85ad463a911b6bde06661e80.r2.dev. Learn about its status and technical details here.

## Summary
PhishDestroy identifies pub-ef47dfdc85ad463a911b6bde06661e80.r2.dev as a high-risk generic phishing domain. The domain was registered on February 21, 2026, and exhibits typical phishing characteristics with a misleading or empty page titled "Not Found".

This domain resolves to IP 104.18.54.45 and is registered through Cloudflare, Inc. VirusTotal flags it by 16 out of 95 security vendors. It appears on one security blocklist, indicating confirmed malicious activity.

Currently, the domain is offline, reducing immediate threat exposure. PhishDestroy recommends continued monitoring and blocking to prevent potential phishing attacks stemming from this domain.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 404)
- Page title: Not Found

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 104.18.54.45
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- SSL Issuer: Let's Encrypt / E7

## Detection Status
- VirusTotal: 16 vendors flagged
  Vendors: ["ADMINUSLabs", "Criminal IP", "alphaMountain.ai", "BitDefender", "CyRadar", "DNS8", "ESET", "Emsisoft", "Fortinet", "G-Data", "Lionic", "Netcraft", "Phishing Database", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cec3d-2a65-712e-a154-d690dbfd0f00.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/fbcfd482-16ce-4b18-8423-a0d2507f64a3
- PhishDestroy: https://phishdestroy.io/domain/pub-ef47dfdc85ad463a911b6bde06661e80.r2.dev/
- LLM endpoint: https://phishdestroy.io/domain/pub-ef47dfdc85ad463a911b6bde06661e80.r2.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/pub-ef47dfdc85ad463a911b6bde06661e80.r2.dev/
Last updated: 2026-03-19