First seen March 1, 2026 · Last seen May 24, 2026 · Threat Feed
Public preview
IOC type, status and defensive guidance visible. Pro adds alert context, Pro+ adds exports and deeper relationships.
Context
Mock staging domain for Phantom Crane infrastructure operations. Uses .invalid reserved TLD.
Defensive Guidance
Monitor passive DNS for associated subdomains. Review TLS certificate transparency logs.
Tags
Safety Note
Uses .invalid reserved TLD (RFC 2606). Not a real domain.
Actions
Related Threat Feed Items
Deeper context available with Pro+
View plans →
