Security Report for pub-5274618e0b0147ed8e1e1de19e222862.r2.dev

[FACT] Safe Browsing reports this domain as clean 1, and 24 of 28 threat feeds responded clean 3. However, 4 threat feeds have flagged this domain with critical signals 2: shodan_internetdb detected suspicious ports, dns_security flagged it for DNS-based malware blocking, and both phishing_database and phishing_army independently classified it as phishing 2. [INFERENCE] The convergence of two dedicated phishing databases (phishing_database and phishing_army) combined with DNS malware blocking indicates strong evidence of phishing infrastructure, with 85% confidence. The suspicious ports detection suggests active exploitation or command-and-control activity. While Safe Browsing remains clean, this may reflect a detection lag; the specialist threat feeds represent real-time abuse intelligence 2. [FACT] The .dev TLD carries low abuse risk 4, and no brand impersonation or homograph attacks were detected, which are positive indicators 2. However, these factors do not override the concrete phishing and malware signals.

Powered by ScamLens AI· Check sources to verify important claims