rizveco[.]click

rizveco.click entered the PhishDestroy evidence set on Mar 29, 2026. The stored content classification is generic phishing. The assembled evidence scores 66/100 (elevated).

One independent source is positive: VirusTotal. VirusTotal recorded 2 detections among 94 engines: CRDF, Fortinet on Jul 18, 2026 at 20:45 UTC. The evidence is not unanimous. The external blocklist snapshot contained no matches on Aug 7, 2026 at 14:20 UTC. URLQuery recorded no positive detection. On Mar 29, 2026 at 14:03 UTC, Google Safe Browsing returned no flag; PhishStats returned no feed match. URLScan completed without a malicious verdict (score 0).

HTTP 502 was recorded on Aug 7, 2026 at 02:10 UTC; content was unavailable. Registration records for the domain list Dynadot, LLC as the registrar and Mar 29, 2026 as the creation date. Registration preceded first observation by 0 days. At collection time, the hostname resolved to 147.45.41.219 on AS210644 (AEZA GROUP LLC). The recorded endpoint location is Vienna, AT. The stored server header is nginx. Captured page title: “Next Generation Script Exploits”. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. IoC extraction completed on Jul 29, 2026 at 02:07 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators. TLS metadata lists Let's Encrypt as the certificate issuer with validity through Jun 26, 2026; checked Mar 30, 2026 at 00:23 UTC.

No target brand has been confirmed from stored page content; hostname wording alone is not treated as brand evidence.