# riza88.org — SUSPICIOUS

> PhishDestroy identifies riza88.org as a fake bank login phishing site with 0/95 VirusTotal detections. Check the full report to verify safety.

## Summary
PhishDestroy identifies riza88.org as a credential theft phishing site designed to impersonate a bank's login portal, harvesting user credentials under false pretenses. This domain poses a high risk to unsuspecting visitors who may unknowingly enter sensitive banking information, believing they are accessing a legitimate financial service. The threat actor behind this domain is likely attempting to exploit trust in familiar banking interfaces to facilitate fraud or identity theft.  This domain was flagged with a risk level of 'under_investigation' and remains active despite 0 detections on VirusTotal as of the latest scan. The domain resolves to IP 172.67.136.163, was registered through NameCheap, Inc., and was created on March 13, 2026. The domain also utilizes a Let's Encrypt SSL certificate, which may further deceive users into believing the site is trustworthy. The lack of detections on VirusTotal suggests this phishing campaign may still be in its early stages, allowing the domain to fly under the radar while targeting potential victims.  Users who have visited riza88.org should immediately cease any interaction with the site and avoid entering any personal or financial information. It is strongly recommended to change passwords for any accounts that may have been exposed and monitor financial statements for unauthorized transactions. If you suspect your credentials have been compromised, contact your bank or financial institution immediately to report the incident and request further guidance. For a more detailed analysis, refer to the full threat report associated with this domain.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-13 16:12:55
- Registrar: NameCheap, Inc.
- IP: 172.67.136.163

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/riza88.org
- PhishDestroy: https://phishdestroy.io/domain/riza88.org/
- LLM endpoint: https://phishdestroy.io/domain/riza88.org/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/riza88.org/
Last updated: 2026-03-20