Assume it's a malware site looking to hijack your computer. The original site still shows shutdown.

Just checked. It isn't.

I mean, can you share a link, image or context? At least my bookmark from the original website still shown the shutdown message.

bad actors

Misleading, rarbg.to still has the same shutdown message. The owners of rarbg would still have access to their own domain - if they intend to update it with any news they could.

Any other pretend rarbg domain is going to be some copycat site trying to coast on the rarbg brand. Just like the copycat KAT sites that are around now, KAT itself is long gone too.

I have seen litebg.se, if that's what you mean, though its far smaller - for the obvious reasons, I assume. And I'm not entirely sure if its safe either.

Sorry guys, I could swear that I was on the of domain...