strsemakan[.]rojapk[.]com

PhishDestroy identifies strsemakan.rojapk.com as an active phishing site masquerading as a legitimate seed bank to harvest user credentials and deliver malware. The domain was registered on April 13, 2026 through CV. Jogjacamp and currently resolves to IP 147.93.157.6. Only one out of 95 VirusTotal security vendors flagged the page at the time of analysis, indicating low initial detection but elevated risk due to active impersonation and short operational window. This domain poses a specific credential-harvesting threat by luring agricultural users to a convincing fake seed-bank portal where login details, payment information, and personal data are exfiltrated to attacker-controlled servers. The combination of a recent registration date (April 13, 2026), Let’s Encrypt SSL certificate, and low VirusTotal detection rate suggests a hastily deployed campaign with potential for rapid expansion. The registrar CV. Jogjacamp has not yet suspended the domain, so continued exposure remains likely until broader blocklists catch up. If you visited strsemakan.rojapk.com, immediately cease use of any credentials entered and scan connected devices for malware. Revoke any payment methods used on the site and report the incident to your financial institution. Update passwords only after confirming the legitimate site’s URL and ensure your device is free of infostealers. Monitor bank statements for unauthorized transactions and consider reporting the domain to your national cybercrime unit to aid takedown efforts.