# registrasipinjamankamu.risjoki.it.com — MALICIOUS

> registrasipinjamankamu.risjoki.it.com is a loan scam site posing as a registration portal. 7 of 95 VirusTotal vendors flagged it for phishing; avoid entering.

## Summary
PhishDestroy identifies registrasipinjamankamu.risjoki.it.com as an active loan-registration phishing domain that masquerades as a legitimate finance portal. The site lures victims into entering sensitive personal and banking details under the guise of a quick loan approval process, then harvests that information for fraud or resale. Security vendors have already caught on: seven out of 95 VirusTotal scanners now classify the domain as malicious, showing that the risk is real and growing.

This domain was flagged within hours of creation and remains on active watchlists. It resolves to IP 188.114.97.3 and runs on a Let’s Encrypt SSL certificate, giving it a deceptively trustworthy appearance. Behind the scenes, the site was registered through a privacy-protected proxy, making the true owner difficult to trace and raising the likelihood of further abuse.

If you visited the site, do not enter any personal, financial, or login details. Immediately clear your browser cache and cookies, then run a reputable antivirus scan. If you already submitted sensitive data, contact your bank to freeze affected accounts and report the incident to your local cybercrime unit. Forward any phishing emails to the Anti-Phishing Working Group (reportphishing@apwg.org) and preserve logs or screenshots for evidence.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 7 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/72097c33-5643-4dd4-880e-f98fe025cf69
- PhishDestroy: https://phishdestroy.io/domain/registrasipinjamankamu.risjoki.it.com/
- LLM endpoint: https://phishdestroy.io/domain/registrasipinjamankamu.risjoki.it.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/registrasipinjamankamu.risjoki.it.com/
Last updated: 2026-03-28