raceline[.]be

This domain, raceline.be, was identified as a credential theft site designed to harvest login credentials from unsuspecting visitors. The site is currently offline, but during its active period it posed a significant risk to users who may have entered sensitive information. Analysis indicates the domain was registered through Internet Service Europe BV, with a creation date of February 21, 2026, and resolved to IP address 104.21.91.111. The SSL certificate was issued by Google Trust Services, lending a false sense of legitimacy.

Infrastructure analysis reveals that the site employed technologies including Magento, MySQL, PHP, Varnish, Bootstrap, RequireJS, PayPal, and AMP, suggesting a sophisticated setup intended to mimic a legitimate e-commerce platform. Despite a VirusTotal detection count of 0 out of 95 vendors, the domain appears on 1 security blocklist and received a Gridinsoft trust score of 0 out of 100, indicating strong indicators of malicious intent. The site was blocked by PhishDestroy, further confirming its threat status.

The current status of raceline.be is offline, which reduces immediate risk to users. However, any credentials or personal data entered while the site was active may be compromised. Users who interacted with this domain should change their passwords immediately and enable two-factor authentication on affected accounts. Organizations should monitor for any related phishing attempts and consider adding this domain to their blocklists. Ongoing vigilance is recommended, as similar domains may appear under different registrars or IP addresses.