# rajabandot.com — SUSPICIOUS

> PhishDestroy identifies rajabandot.com as a credential phishing site from a March 2019 domain now flagged by 1 of 95 VirusTotal scanners. Check the full report.

## Summary
PhishDestroy identifies rajabandot.com as an active credential-phishing site designed to trick visitors into entering usernames and passwords. When loaded, the page mimics a legitimate login portal to harvest credentials for later account takeover or fraudulent transactions. The domain promises content or services that never materialize, redirecting victims to fake forms instead. Security teams classify this as elevated risk because stolen credentials can unlock multiple accounts across banking, email, and corporate systems.

This domain was flagged by PhishDestroy after VirusTotal reported 1 out of 95 participating scanners detected malicious activity. rajabandot.com was registered through Namecheap Inc on March 28, 2019, and currently resolves to IP address 92.243.74.2. Despite the Google Trust Services SSL certificate, the mismatch between the certificate issuer and the domain’s short operational history raises suspicion. The low VT detection rate is common with newly spun phishing pages that have not yet propagated across all vendor feeds.

If you visited rajabandot.com at any time, assume your credentials or payment details may have been captured. Immediately change passwords on all accounts that share the same or similar usernames and passwords, enable multi-factor authentication where available, and monitor bank and card statements for unauthorized transactions. Screenshot the page and report the incident to your security team or platform provider. Avoid reusing credentials across websites to reduce the blast radius of credential stuffing attacks.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2019-03-28 17:16:51
- Registrar: NAMECHEAP INC
- IP: 92.243.74.2

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/eab02fcc-7b94-4c31-a6a1-52d95a085831
- PhishDestroy: https://phishdestroy.io/domain/rajabandot.com/
- LLM endpoint: https://phishdestroy.io/domain/rajabandot.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/rajabandot.com/
Last updated: 2026-03-22