indicatordomain
pub-9ee1bf400ea645748830bc408aa2b88a[.]r2[.]dev
- First seen
- 2026-05-14
- Last seen
- 2026-05-14
- Sightings
- 1
Posts referencing this indicator
- Tycoon2FA Phishing-as-a-Service Platform Persists Following Takedown
Abused Cloudflare shared developer infrastructure for Tycoon2FA.