randenta-ro[.]live

PhishDestroy identifies randenta-ro.live as a credential harvesting scam posing as a legitimate service to trick users into surrendering sensitive login details. This domain, registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on May 03, 2026, resolves to IP 104.21.64.82 and utilizes a Let’s Encrypt SSL certificate to appear trustworthy. Despite zero detections on VirusTotal as of seed 612c36, the domain remains under active investigation due to its high-risk phishing behavior targeting unsuspecting visitors.

The technical indicators and timeline raise significant red flags. The domain’s creation date (May 03, 2026) is suspiciously recent, and its association with NICENIC INTERNATIONAL GROUP CO., LIMITED—a registrar known for accommodating high-risk domains—further compounds concerns. While VirusTotal’s 3/95 detections suggest low immediate threat visibility, this does not guarantee safety; many credential harvesting scams evade detection until user reports escalate. Additionally, the domain’s hosting IP (104.21.64.82) is linked to multiple high-risk activities, warranting caution.

If you visited randenta-ro.live, assume your credentials or personal data may have been compromised. Immediately change passwords for any accounts you entered on the site, enable multi-factor authentication where possible, and run a malware scan on your device. Report the domain to your IT administrator or cybersecurity team and consider using a password manager to monitor for unauthorized access. Stay vigilant for phishing emails or unexpected login attempts, as credential harvesting scams often escalate after initial compromise.