rako[.]free-drop[.]fun

This domain is flagged as a generic phishing threat and remains under investigation as of July 30, 2026. The domain rako.free-drop.fun was created on July 28, 2026, making it only two days old at the time of this report. It is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar often associated with low-cost, high-volume domain registrations that can be abused for malicious purposes. The domain is currently active and resolves to IP address 188.114.96.3, which is part of Cloudflare's hosting infrastructure.

The nameservers brynne.ns.cloudflare.com and rudy.ns.cloudflare.com further confirm Cloudflare's involvement. VirusTotal scanned this domain with 91 vendors, and none currently flag it as malicious; however, absence of detections is not proof that the domain is safe. The domain appears on one security blocklist and is blocked by PhishDestroy, a specific anti-phishing tool. No additional intelligence is available regarding the page title, SSL certificate status, HTTP response codes, trust scores, or specific brand impersonation.

The exact content served by the domain has not been analyzed, so the nature of the phishing campaign remains unknown. Defenders should treat this domain as suspicious due to its recent creation, registration through a high-risk registrar, and presence on at least one blocklist. It is recommended to block the domain at the network level, monitor for any associated email traffic or credential submissions, and re-scan periodically as threat intelligence may update. No further action is warranted until additional evidence emerges, but the domain should not be considered benign solely because of the current low detection rate.