rejekigamesagen013[.]com

PhishDestroy identifies rejekigamesagen013.com as an active credential harvesting domain posing as a gaming site. This domain was flagged under investigation but remains unblocked by major scanners, indicating a potential blind spot in threat intelligence coverage. The site leverages Amazon-issued SSL certificates to appear legitimate while harvesting user credentials under the guise of 'Rejeki Games Agent 013'.

This domain exhibits multiple red flags despite its low detection rate. Resolving to IP 52.222.136.74, it was registered on October 30, 2025, through NameSilo, LLC— a registrar frequently associated with disposable domains. VirusTotal currently shows 1/95 detections, meaning no antivirus or security vendor has flagged it yet. The domain’s recent creation date suggests opportunistic registration, while the Amazon SSL certificate adds a veneer of legitimacy to deceive victims. No blocklist entries or trust score data are available, further highlighting its novelty in the threat landscape.

Mitigation requires immediate action from both users and defenders. Organizations should block rejekigamesagen013.com at the network perimeter and DNS level due to its credential harvesting objective. Users who may have interacted with the site should reset passwords for any accounts exposed during the visit and enable multi-factor authentication where possible. Security teams should monitor for downstream phishing campaigns leveraging stolen credentials, as this domain’s low detection rate indicates it may be part of a larger, evolving campaign. Given its active status and lack of vendor detections, this domain poses a credible threat until further intelligence emerges.