dev[.]api[.]raccoonsearch[.]com

PhishDestroy has flagged dev.api.raccoonsearch.com as an active credential phishing domain designed to steal user login details. This site mimics legitimate API endpoints, tricking visitors into entering sensitive information under false pretenses. The domain’s recent activity and low detection rate—currently 10 out of 95 VirusTotal engines—indicate it is actively being used in campaigns to harvest credentials for further exploitation, such as account takeovers or financial fraud. This domain was registered through EuroDNS S.A. on March 30, 2016, and is hosted on IP address 185.149.120.183. Notably, it utilizes a Let’s Encrypt SSL certificate, adding a veneer of legitimacy that may deceive users. Despite these superficial assurances, the domain remains unflagged by security tools, highlighting the need for proactive monitoring and user vigilance. Its age suggests it may have been dormant or repurposed for malicious use, which is a common tactic to evade detection. If you’ve visited this domain, cease any interactions immediately and inspect your accounts for unauthorized access. Reset passwords linked to this site, enable multi-factor authentication where possible, and scan your devices for malware. Report the domain to your security team or through PhishDestroy’s portal to help block further abuse. Avoid entering any credentials or personal data on this site, as it may be harvested by attackers.