rakebitru[.]com

Analysis indicates that rakebitru[.]com is associated with credential theft risk. The observed infrastructure presented the page title "Just a moment...", a pattern commonly seen on sites attempting to obscure their true purpose behind intermediary pages. The domain resolved to IP address 82.139.216.46 and was subsequently taken offline. Although currently unavailable, offline status does not eliminate the possibility that the infrastructure was previously used to collect account credentials or redirect visitors to malicious content.

Technical indicators provide additional context for the assessment. VirusTotal reports 1 out of 95 security vendors flagging the domain. Registration records show the domain was created on April 22, 2026 and registered through Porkbun LLC. The domain was reported on 1 security blocklist and was blocked by a phishing mitigation provider. Infrastructure analysis also identified an SSL certificate issued by Google Trust Services, demonstrating that the presence of HTTPS alone should not be treated as evidence of legitimacy.

If a user visited rakebitru[.]com, any credentials entered on the site should be considered potentially exposed. Recommended actions include changing passwords associated with any accounts used during the visit, enabling multi-factor authentication where available, reviewing account activity for unauthorized access, and monitoring for unusual login attempts. Security teams should retain relevant logs, review connections to IP address 82.139.216.46, and investigate any credential reuse across services. Continued monitoring is advisable because phishing infrastructure can be reactivated or migrated to newly registered domains.