pub-50594d332a6d4bd48f0d302f8c0a488d[.]r2[.]dev

The domain pub-50594d332a6d4bd48f0d302f8c0a488d.r2.dev was a generic phishing site posing no specific brand impersonation but targeting users with fraudulent content. It operated as a phishing page under the title 'KSI303 - Platform Games Slot Android Resmi Terlengkap', likely aiming to deceive visitors into disclosing sensitive information or downloading malicious software. As of the latest verification, pub-50594d332a6d4bd48f0d302f8c0a488d.r2.dev has been taken offline, reducing immediate risk, though caution is advised for any residual exposure.

Technical indicators confirm the domain's suspicious nature. Only 1 of 95 VirusTotal vendors flagged pub-50594d332a6d4bd48f0d302f8c0a488d.r2.dev, while Google Safe Browsing did not detect it. The domain appeared on 1 security blocklist (PhishDestroy) and was registered through Cloudflare, Inc. on August 23, 2022. It resolved to the IP address 104.18.54.45, hosted by Cloudflare in the US, and used an SSL certificate issued by Let's Encrypt (E7). Observed technologies included AMP, Lightbox, HSTS, and Cloudflare, with a 404 HTTP status at the time of assessment.

Users who interacted with pub-50594d332a6d4bd48f0d302f8c0a488d.r2.dev should take immediate safety steps. If credentials were entered, change passwords for all associated accounts and enable two-factor authentication (2FA). Monitor accounts for unauthorized activity and report any suspected fraud to relevant financial institutions. To aid others, report the domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities. Avoid revisiting the site, even if it appears inactive, as phishing domains may resurface.