theraahclub[.]com

The domain theraahclub.com was registered on April 21, 2026 through Hostinger operations, UAB, and is currently serving content over HTTPS with a Let’s Encrypt R13 certificate. The site resolves to the IP address 89.117.157.154, which is geolocated to Lithuania and associated with the Lithuanian Radio and TV Center. DNS resolution is handled by the parking nameservers ns1.dns-parking.com and ns2.dns-parking.com, and the server returns an HTTP 200 response for the root URL.

Analysis of threat intelligence sources shows that theraahclub.com appears in a single AlienVault OTX pulse and has been flagged by Gridinsoft with a trust score of 0 out of 100, indicating an extremely low reputation. VirusTotal reports that one out of ninety‑five security vendors has flagged the domain, and the site is listed on one public blocklist. PhishDestroy has already blocked the domain, and the overall risk assessment is marked as high with an active status.

The page title returned from the site is "The Raah Club - A Wellness Community," suggesting the domain is presenting itself as a wellness‑oriented community. No additional evidence has been observed regarding the specific content, phishing kit, or targeted brand, and the exact nature of the fraudulent activity remains unverified beyond the generic classification of generic_phishing. The limited detection footprint—single OTX reference and minimal vendor flagging—does not preclude the possibility of a broader campaign, but current data points to a nascent or low‑visibility operation.

Defenders should proactively block theraahclub.com at network and endpoint layers, monitor DNS queries for the associated nameservers, and enforce TLS inspection to detect any malicious payloads that may be delivered over the active HTTPS connection. Continuous re‑assessment of the domain’s reputation on VirusTotal and blocklist feeds is recommended, as additional detections could emerge if the site expands its phishing activities.