pub-a5dea08759934238bd2363b86fdeed1a[.]r2[.]dev

This report analyzes a domain identified as pub-a5dea08759934238bd2363b86fdeed1a.r2.dev. The site presents a generic "Not Found" page title, indicating no legitimate content or brand is being hosted. The threat posed by this domain is likely as a disposable or transient endpoint used for malicious activities, such as serving phishing pages, distributing malware, or acting as a command-and-control server, given its recent creation and lack of branded content.

Technical evidence shows the domain has a high-risk profile. VirusTotal reports 11 out of 95 vendors flagging the domain as malicious, with specific detections from ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, and CyRadar. It is listed on 2 blocklists. The domain was created on 2026-02-21 and is registered through Cloudflare, Inc. The underlying IP address is 104.18.54.45, located in the United States and assigned to AS13335 (Cloudflare, Inc.). The site uses an SSL certificate issued by Let's Encrypt with serial E7.

The current status of this domain is DOWN/OFFLINE, indicating it is not actively serving content. The domain risk score is 73, which is elevated. Given the high detection rate, recent creation date, and offline status, this domain represents a moderate to high risk and should be blocked or monitored for potential re-activation.