24x7rxtabworld[.]com

This domain, 24x7rxtabworld.com, is confirmed as a credential theft operation designed to harvest user login details under the guise of a retail platform. Analysis of the page title, 'Happy Family Store,' indicates an attempt to impersonate a legitimate e-commerce brand, likely to deceive victims into entering sensitive account information. No direct evidence of a crypto drainer kit was observed, but the infrastructure aligns with credential harvesting tactics commonly used in follow-on financial fraud or account takeover schemes. Infrastructure analysis reveals the following technical indicators: the domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and was created on March 27, 2026, suggesting a recently established malicious operation. It resolves to the IP address 51.38.142.165 and uses a Let's Encrypt SSL certificate, a common tactic to feign legitimacy. The domain appears on one security blocklist and is flagged by 7 out of 95 security vendors on VirusTotal. Additionally, it is referenced in eight threat intelligence pulses on AlienVault OTX, further corroborating its malicious nature. Gridinsoft assigns the domain a trust score of 0/100, and it is actively blocked by PhishDestroy. As of the latest assessment, 24x7rxtabworld.com has been taken offline, likely in response to detection and reporting. However, the infrastructure may be reactivated under a different domain or IP address, given the transient nature of phishing operations. Users who interacted with the site are advised to reset credentials for any accounts entered, enable multi-factor authentication, and monitor financial statements for unauthorized activity. Organizations should update blocklists to include this domain and its associated IP, while remaining vigilant for similar impersonation attempts targeting retail brands.