rendangendah[.]com

Analysis indicates that the domain rendangendah.com was registered on 25 July 2025 through the registrar CV. Jogjacamp and is currently hosted behind Cloudflare infrastructure (IP 104.26.14.12, AS13335 Cloudflare, Inc., United States). The site serves HTTP 200 responses and presents the page title “storefront rendang endah”. TLS is enforced via HSTS and the certificate is issued by Google Trust Services under the WE1 framework. DNS resolution uses the Cloudflare nameservers ezra.ns.cloudflare.com and jocelyn.ns.cloudflare.com. The domain is flagged as a high‑risk, active brand‑impersonation campaign targeting Instagram users, classified as social‑media phishing. It has been added to at least one security blocklist and is blocked by PhishDestroy. VirusTotal analysis shows a single vendor detection among 95 scanned, and Gridinsoft assigns a trust score of 0/100, indicating a lack of reputation. While the page content has not been publicly reviewed, the combination of brand impersonation, recent registration, and low trust metrics suggests malicious intent. Defenders should block or sinkhole the domain, monitor DNS queries for the associated IP range, and update detection rules to include the observed hostnames and certificate attributes. Ongoing observation is recommended to capture any future payloads or credential‑stealing pages that may be deployed.