fr24cast[.]com

On July 29, 2026, the domain fr24cast.com was observed as part of an active generic phishing campaign. The domain was registered on September 13, 2025 through Hosting Concepts B.V. d/b/a Registrar.eu. VirusTotal scans show that 19 of 91 security vendors have flagged the domain as malicious, indicating a moderate level of detection across the security community. The domain is presently listed on a single public blocklist and has been added to the PhishDestroy sinkhole, confirming that it is being actively mitigated by at least one anti‑phishing service.

The elevated risk rating reflects the combination of recent creation, vendor detections, and active blocklist presence. Evidence does not yet include publicly available page content, SSL certificate details, or hosting IP information, so the exact payload or credential‑harvesting tactics remain uncertain. No additional intelligence such as associated IP addresses, autonomous system numbers, or geographic hosting data have been disclosed. Consequently, defenders cannot yet map the full infrastructure or attribute the campaign to a specific operator.

Given the current evidence, security teams should block outbound connections to fr24cast.com at the network perimeter and add the domain to endpoint and email filtering deny lists. Continuous monitoring of DNS queries for the domain is advised, as is periodic re‑evaluation of VirusTotal and other reputation sources for any change in detection count. Organizations employing web‑proxy or secure web‑gateway solutions should ensure that the domain is included in URL filtering rules. Incident response teams should be prepared to investigate any authentication attempts or credential submissions that may involve this domain, and users should be warned not to interact with unsolicited communications that reference fr24cast.com.