11cra[.]at

The domain 11cra.at is a generic phishing site designed to deceive users into disclosing sensitive information. It does not impersonate a specific brand or employ a known crypto drainer kit. As of the latest verification, 11cra.at has been taken offline, reducing immediate risk but not eliminating the need for caution.

Technical analysis shows that 11cra.at was flagged by 1 of 95 VirusTotal security vendors, including SOCRadar, and appears on 1 security blocklist (PhishDestroy). The domain was registered on March 11, 2026, through Gransy s.r.o. (registrar ID 609) and resolves to the IP address 188.114.96.3, hosted by Cloudflare, Inc. (AS13335) in the US. The SSL certificate is issued by Google Trust Services (WE1), and the observed page title was 'Just a moment...' with an HTTP 403 status. Technologies detected include Cloudflare Browser Insights, Cloudflare, and HTTP/3. Google Safe Browsing has not flagged the domain.

Users who may have interacted with 11cra.at should take immediate steps to secure their accounts. Change passwords for any services accessed while the site was active, enable two-factor authentication (2FA), and monitor accounts for unauthorized activity. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in broader mitigation efforts. If financial or crypto-related credentials were exposed, contact the relevant institution for further guidance.