I'm following up on a host I noticed a few days ago that appeared to be hosting multiple malicious subdomains (#607). The subdomains listed were found by searching for r2.dev on urlscan.io https://urlscan.io/search/#r2.dev and reviewing the past three hours of history, looking for live pages.
Comments
I'm following up on a host I noticed a few days ago that appeared to be hosting multiple malicious subdomains (#607). The subdomains listed were found by searching for r2.dev on urlscan.io
https://urlscan.io/search/#r2.dev
and reviewing the past three hours of history, looking for live pages.Wildcard domain records
Sub-Domain records
Hosts (RFC:953) specific records, not used by DNS RPZ firewalls
No response
SeafeSearch records
No response
Screenshots
Screenshot
![345636001-dc7ed9e8-e35c-4afb-b22d-70aa92e18001](https://github.com/mypdns/matrix/assets/108126637/ee1156fc-128a-4b7a-bee4-2a3b7e13bd9d) ![345636106-ad721732-2c12-4a87-98ab-86b87b796257](https://github.com/mypdns/matrix/assets/108126637/41ae24a4-dff0-4021-bdf1-3c7c57bea4f6) ![345636198-10f02de2-7ea0-4b82-a0f7-74dbb225e3c6](https://github.com/mypdns/matrix/assets/108126637/793d562e-c455-40f4-b74e-1c790d6341e3) ![345636786-f1d4b6c8-4d84-47ea-8755-cd65fac2fd2e](https://github.com/mypdns/matrix/assets/108126637/b6c85a2e-f410-4e17-b48c-aee2d7ebe499) ![345637115-b70e0403-d711-4e36-92eb-6d1b89f9b0e9](https://github.com/mypdns/matrix/assets/108126637/2bc1543c-9f6f-4a4e-a17e-071f7b139188) ![345637328-4bb17c34-e8ec-44ba-bb7c-eb174d9e26cc](https://github.com/mypdns/matrix/assets/108126637/3321b8ed-2877-4d7c-84a9-118e8f99a5b3) ![345637555-8dcd1fde-a82c-4678-bad7-3df79deabf3c](https://github.com/mypdns/matrix/assets/108126637/655303ba-3cee-433b-8a9a-764270b405a3) ![345643134-6fd32180-a2ba-4c11-a27f-c955e49d375d](https://github.com/mypdns/matrix/assets/108126637/f0f0bfb1-24de-4296-bb8d-11da8adffd2a) ![345637801-0196bfee-11c8-49bb-a7ac-ec5bae365ba8](https://github.com/mypdns/matrix/assets/108126637/4295cbcc-5aaa-481d-a37c-b94b4d4d4217) ![345638099-64830c47-6bd9-4c26-b06c-cfcfbec59e7c](https://github.com/mypdns/matrix/assets/108126637/a68a006d-946a-4b19-b8c0-2391f36562ad) ![345638260-cf7826d8-7e28-4fe5-9fba-44e32a4c7d97](https://github.com/mypdns/matrix/assets/108126637/d78a1745-b0be-4c55-ae9b-a7f5654e0c08) ![345638571-07398f38-37ba-49e6-b929-5fbdf8b62a29](https://github.com/mypdns/matrix/assets/108126637/43778501-cb45-4c36-9f5b-55a3d209f0cb) ![345638571-07398f38-37ba-49e6-b929-5fbdf8b62a29-1](https://github.com/mypdns/matrix/assets/108126637/5b4a0829-acf2-4e21-a91b-c00e056db2c1) ![345638786-459b8dc9-026d-44e1-b0dc-19df742614b4](https://github.com/mypdns/matrix/assets/108126637/95e0e1b7-f147-4b51-8502-159e75d191c0) ![345639036-b1b617c2-62e4-4633-9914-8ea1d1eba1b4](https://github.com/mypdns/matrix/assets/108126637/60f8e32d-cf6b-4f2e-aee2-8dc3804155c7) ![345639274-0d643533-9406-45ef-b46e-bcc268357a4c](https://github.com/mypdns/matrix/assets/108126637/6dfc6eb6-61f8-4a73-a00d-246a1da33177) ![345639545-1a3128db-f5e9-4730-a49c-abc8321eefad](https://github.com/mypdns/matrix/assets/108126637/43bf4ec1-10a9-40b9-b329-fc0321c6002f) ![345639888-86940cfe-cfb3-41f7-8811-c0139ae40959](https://github.com/mypdns/matrix/assets/108126637/656abe39-064e-48f5-854d-c51114b1cf88) ![345640340-2dd15788-c3ed-4828-8f90-2e6463a4a3d8](https://github.com/mypdns/matrix/assets/108126637/ce16ee2d-10b6-41f6-a8de-cb4becba3790) ![345640520-31fbe0fb-72a5-47d2-bd90-94143071db5b](https://github.com/mypdns/matrix/assets/108126637/42e9246b-7365-40de-a6a5-ddd082d3cf21) ![345640905-4790dca5-6b80-4b93-89a0-9758b8e24659](https://github.com/mypdns/matrix/assets/108126637/94e17fc6-3afd-4e94-854b-ed23882d99b3) ![345641068-5966b20d-161d-4f30-a63f-a2cc032c7966](https://github.com/mypdns/matrix/assets/108126637/7bfc92a1-5027-4065-bf61-2847baaa7daf) ![345641185-5bb8d5c5-3c5d-4137-9838-fa81d016b8fc](https://github.com/mypdns/matrix/assets/108126637/95af623c-37bb-4b4a-9083-bc2208b433bb) ![345641310-ed0dae60-6262-4acc-8710-838904d10901](https://github.com/mypdns/matrix/assets/108126637/b89f6b09-45cf-4993-86c7-e4b5af53e233) ![345641444-c8eec974-3dd8-42be-bcf6-1eb1896e51db](https://github.com/mypdns/matrix/assets/108126637/f82908f7-6a9a-4d3a-894b-f7383db504c0) ![345641619-23cbebae-7356-4bf6-be5f-0fb408cdf016](https://github.com/mypdns/matrix/assets/108126637/6d7681f1-55a6-4793-95c4-c97fa44775c3) ![345641797-0b5f3f35-dda9-4b67-a8c1-0b31277d9e7b](https://github.com/mypdns/matrix/assets/108126637/dc127795-022c-461a-a2d0-24c8c427dd99) ![345642064-982e7cef-9ae1-4996-9b5d-1965859bdb5f](https://github.com/mypdns/matrix/assets/108126637/eacafb01-99a8-4ee9-95b4-a1c7d0c08493) ![345642499-d7c02642-9f73-48e3-b4fd-2bc44bd4bcee](https://github.com/mypdns/matrix/assets/108126637/14d9e86e-75a3-46aa-bf73-cff77445fa1c) ![345642792-63772e95-3b7d-4922-a4c5-39f3d7463c38](https://github.com/mypdns/matrix/assets/108126637/684e1c83-dcc1-4f1f-97c5-430184cfe5aa) ![345644039-201646c4-f42f-4b49-ac39-d82421c7e3a5](https://github.com/mypdns/matrix/assets/108126637/8094549e-76a1-4cb0-9a20-c562f09eb090) ![345644208-a6fff1b1-5b18-4872-8bc1-91e4fd90489d](https://github.com/mypdns/matrix/assets/108126637/611a31eb-57b5-4485-b787-8826980c40f8) ![345644387-18e702b0-cc0b-4ec8-93ad-14d9eac366e3](https://github.com/mypdns/matrix/assets/108126637/8970c855-8500-41ea-b6af-2c19f5ac472b) ![345644525-9e386337-80ef-4964-a54d-19b1a0fb594e](https://github.com/mypdns/matrix/assets/108126637/54320c22-b3e3-478f-99b4-66f6f5c52848) ![345644662-f61da356-9aca-48f7-ab4c-5597d353dd7b](https://github.com/mypdns/matrix/assets/108126637/78c08d36-0487-43ed-b2b5-be01b31398de) ![345644790-5d295da6-a251-4667-93ad-7df9b8440ef8](https://github.com/mypdns/matrix/assets/108126637/384280f5-4cd4-42e6-88b8-07edb044a814)Links to external sources
logs from uBlock Origin
N/A