rz03[.]com

The domain www.rz03.com was registered through GoDaddy.com, LLC on 12 March 2026 and is presently active. DNS resolution points to 104.21.36.58, an address owned by Cloudflare, Inc. (AS13335) and located in the United States. The site presents the page title “MT Blockchain Mining Foundation” and serves content over HTTPS with a certificate issued by Google Trust Services under the WE1 profile. HTTP responses return status 200 and the site negotiates HTTP/3, indicating modern transport support. Front‑end analysis reveals the use of Vue.js, Facebook Pixel, and Cloudflare Browser Insights, confirming a typical JavaScript‑heavy construction hosted behind Cloudflare’s edge network. Security telemetry shows the domain is listed on one public blocklist and has been blocked by the PhishDestroy feed. Google Safe Browsing categorises the URL as “SOCIAL_ENGINEERING”, and VirusTotal recorded 12 detections out of 91 scanned scanners, reinforcing the malicious assessment. The threat classification is a generic crypto‑related phishing campaign, specifically a crypto scam. While the public‑facing page title suggests a blockchain mining foundation, no further attribution or legitimate business affiliation has been observed. Uncertainty remains regarding the exact payload or credential‑ harvesting mechanisms, as the site content has not been fully dissected. Defenders should block DNS resolution to 104.21.36.58 for the domain, add www.rz03.com to URL filtering and web‑gateway blacklists, and monitor outbound traffic for connections to Cloudflare edge nodes that may be used for command‑and‑control or data exfiltration. Continuous re‑scanning with updated malware intelligence is recommended to capture any evolving indicators of compromise.