khaijstore[.]com

PhishDestroy’s automated systems have identified khaijstore.com as a credential harvesting phishing domain targeting Arabic-speaking users. The site mimics a regional retail storefront with a deceptive page title written in Arabic, designed to trick visitors into entering sensitive login or payment details. When visited, the page presents a fake store interface asking for account credentials or financial information, which is then sent to a malicious server under the attacker’s control. This is a classic phishing pattern and poses a direct risk to users who may unwittingly disclose personal or financial data. This domain was flagged by PhishDestroy’s threat intelligence pipeline and shows clear indicators of malicious intent. The domain resolves to IP address 104.21.9.48 and was registered on March 25, 2024 through Hosting Concepts B.V. d/b/a Registrar.eu. It uses a valid Let’s Encrypt SSL certificate, which may give victims a false sense of security. Notably, as of the latest scan, khaijstore.com has not been flagged on VirusTotal, with only 2 out of 95 detection engines identifying it as malicious. This low detection rate highlights the importance of proactive threat research and user awareness. If you have visited khaijstore.com or entered any information on the site, immediately change passwords for the account you used and monitor your bank or payment accounts for unauthorized transactions. Do not click on any links or download files from the site. Use a reputable antivirus or anti-phishing tool to scan your device. Report the domain to your email provider and local cybercrime unit. Stay vigilant—legitimate stores do not ask for credentials via third-party links or unknown domains.