m[.]r2c4d[.]com

Analysis of the domain m.r2c4d.com indicates a high‑risk generic phishing operation that remains active as of the report date, August 02, 2026. The domain was registered through Name SRS AB and its creation timestamp is May 02, 2026, suggesting a short‑lived infrastructure typical of fast‑flux phishing campaigns. DNS resolution points to the single IPv4 address 107.158.71.218, and the authoritative nameservers are alina.ns.cloudflare.com and curt.ns.cloudflare.com, confirming Cloudflare hosting.

The domain appears on one security blocklist and is actively blocked by the PhishDestroy service, providing an early indication of malicious intent. VirusTotal scans show that 7 of 91 security vendors have flagged the domain, reinforcing the suspicion of malicious activity despite a majority of clean verdicts. No additional intelligence such as Safe Browsing status, OTX mentions, SSL certificate details, HTTP response codes, or page title information is available, leaving the exact phishing payload and targeted brand undefined.

Defenders should prioritize immediate containment by adding m.r2c4d.com to DNS sinkhole or firewall deny lists, and consider blocking the associated IP address 107.158.71.218 at the network perimeter. Continuous monitoring of the domain’s DNS records and any future VirusTotal or blocklist updates is recommended, as further detections could reveal the specific brand or credential‑stealing mechanisms employed. Given the recent registration date and active blocklist status, the domain should be treated as a credible threat until a full takedown is confirmed.