rehengco[.]com

Analysis of rehengco.com, observed on July 22, 2026, indicates that the domain is presently offline but exhibits multiple indicators of malicious activity. The domain was registered on April 07, 2025 through NameCheap, Inc., and its authoritative name server resolves to IP address 192.3.141.253, which is assigned to AS36352 HostPapa in the United States. The hosting infrastructure places the site under a provider known for offering shared web services, a pattern frequently leveraged by threat actors to obscure attribution. The site presents the page title “Rehobot Engineering and Construction Company - Home,” which bears no obvious relationship to the advertised brand target, Amazon, suggesting a deliberate attempt to mislead users through brand impersonation.

The SSL certificate is identified as “R13,” providing only minimal transport encryption without validating the identity of the operator. Reputation metrics are uniformly negative: Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on a single security blocklist, specifically PhishDestroy, which has actively blocked the domain. VirusTotal analysis shows five of ninety‑three security vendors flagging the domain, reinforcing the suspicion of malicious intent.

The overall threat classification is recorded as an e‑commerce scam, consistent with the observed brand impersonation of Amazon. While the site is no longer reachable, defenders should continue to monitor the associated IP address and registrar for potential reuse, update local blocklists with the observed indicators, and consider enforcing strict outbound filtering for traffic to the IP range 192.3.141.0/24. Additional investigation is warranted to determine whether the domain hosted credential‑stealing pages or payment‑draining mechanisms, but the current evidence suffices to label the domain as a high‑confidence malicious resource.