# ranebit.com — SUSPICIOUS

> ranebit.com is a low-risk phishing domain pretending to be a crypto exchange. Learn why it’s unsafe and what to do if you accessed it.

## Summary
PhishDestroy identifies ranebit.com as a phishing domain designed to deceive users by impersonating a legitimate cryptocurrency exchange. Although it currently poses a low risk and is offline, users should be cautious as phishing attempts can lead to stolen credentials or financial loss.

This phishing site mimicked a cryptocurrency trading platform to lure victims into entering sensitive information such as login credentials or payment details. By presenting a seemingly legitimate interface, the domain aimed to trick users into trusting the site and submitting personal data that attackers could exploit.

If you visited ranebit.com, it is advisable to immediately change any passwords or financial information that may have been shared. Monitoring your accounts for unauthorized activity and enabling two-factor authentication can further protect your assets. Since the domain is offline and flagged on one security blocklist, avoid revisiting the site and stay informed about phishing threats to stay safe.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: Cryptocurrency Exchange | Buy cryptocurrency on raneBIT

## Domain Intelligence
- Registered: 2026-03-06 11:07:01
- Registrar: Realtime Register B.V.
- Country: NL
- IP: 172.67.222.196
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["doug.ns.cloudflare.com", "kenia.ns.cloudflare.com"]
- SSL Issuer: Let's Encrypt / E8

## Detection Status
- VirusTotal: 1 vendors flagged
  Vendors: ["SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc29e-8f77-70df-9f0e-32ab60bded8d.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/ranebit.com
- Wayback Machine: https://web.archive.org/web/https://ranebit.com
- PhishDestroy: https://phishdestroy.io/domain/ranebit.com/
- LLM endpoint: https://phishdestroy.io/domain/ranebit.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ranebit.com/
Last updated: 2026-03-19