What Gridinsoft observed on r2utility.com
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20260908164510-6e01708c
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Safe
- Evidence basis
- First-party site analysis External vendor intelligence: Contradictory context — not used for this decision
Remove the unsupported phishing warning for the reviewed apex and www website. Current first-party observations do not reproduce phishing or malware; address the directory listing separately.
Analyst findings
Review 5 documented observations View evidence
The live homepage describes utility and backflow management software. The www address redirects to the same apex site. Terms and privacy pages identify the service and explain accounts and data use.
-
HTTP status
200 -
Final URL
https://r2utility.com/ - Public artifact URL https://www.r2utility.com/
- Public artifact URL https://r2utility.com/terms/
- Public artifact URL https://r2utility.com/privacy/
Browser review showed R2 subscription selection and its own account login. The login form posts to /login on app.r2utility.com. No unrelated brand impersonation, credential destination or automatic download was observed in the reviewed flow.
- Public artifact URL https://app.r2utility.com/public/create-account
- Public artifact URL https://app.r2utility.com/public/login
The directory lists open.php and opens.txt. The open.php response is a 1-by-1 GIF, consistent with an email tracking pixel; this response alone does not demonstrate phishing or malware. Directory listing is an avoidable information exposure. The log contents were not retrieved.
-
HTTP status
200 - Public artifact URL https://r2utility.com/email-track/open.php
The archived homepage dated May 13, 2026 describes the same utility software purpose. This establishes historical content continuity, not continuous absence of compromise.
- Public artifact URL https://web.archive.org/web/20260513142007/https://r2utility.com/
The exact host is also the registrable parent domain. OTX returned 14 URLs, zero pulses and zero malware records. urlscan search returned eight historical records across the domain namespace; selected scan details were inaccessible. Targeted public-index searches found no exact-domain sandbox or threat-feed result. These bounded results do not establish universal safety.
- Public artifact URL https://urlscan.io/domain/r2utility.com
- Public artifact URL https://otx.alienvault.com/indicator/domain/r2utility.com
Scope and limitations
- This is a bounded review of public pages and account entry points, not a server audit, authenticated application test or certification of every subdomain.
- No credentials, payments or forms were submitted. Tracking log contents were not inspected.
- Historical indexes are incomplete; inaccessible urlscan details and negative searches cannot prove the absence of malicious activity.
Help protect others by sharing this page on social media! The more people who know about r2utility.com, the fewer chances they have to deceive someone else. Help others evaluate r2utility.com by sharing this page on social media!