robbinhoofllogooimim[.]godaddysites[.]com

This domain, robbinhoofllogooimim.godaddysites.com, is flagged for generic phishing. The domain is designed to mimic the legitimate Robinhood login page, potentially tricking users into entering their credentials, which can be harvested by malicious actors for unauthorized access.

Analysis indicates that the domain has been flagged by 17 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicion among security professionals. The domain was registered through GoDaddy.com, LLC on November 18, 2013, and has a Scamadviser trust score of 1/100 and a Gridinsoft trust score of 0/100. Additionally, the domain appears on one security blocklist and is blocked by PhishDestroy. The infrastructure analysis reveals that the domain resolves to the IP address 13.248.243.5 and uses technologies such as GoDaddy Website Builder, RequireJS, and HSTS.

If users have visited this domain, they should immediately change their Robinhood account passwords and enable two-factor authentication. It is also recommended to monitor account activity for any unusual transactions or logins. Users should report any suspicious activity to their financial institution and consider running a full system scan to ensure their devices have not been compromised.