Lompat ke laporan keamanan
Checked 09/08/2026 Ref EF8B0775

MALICIOUS — HIGH

Pemeriksaan phishing dan keamanan riowax.com

riowax[.]com

The domain riowax.com is a generic phishing site designed to deceive users through social media phishing tactics.

66/100 evidence score · High
VirusTotal
2/91
Blocklists
No stored match
Ketersediaan
Terakhir diketahui aktif · HTTP 200
2026-03-24 11:58 UTCTerakhir diketahui aktif · HTTP 200

Do not enter credentials, seed phrases, payment details, or personal information on this domain.

⚠️
Domain ini telah ditandai sebagai berbahaya
Mesin keamanan melaporkan deteksi: 2. Berhati-hatilah — jangan memasukkan kredensial atau informasi pribadi.
ABUSE NOTICE · 7D+ OPEN Outgoing abuse reports are recorded; the latest stored availability evidence still shows the domain reachable.
Notification and current-status evidence

The sent-report ledger records the first outgoing report at . It contains 6 outgoing records; the latest is dated . The recorded recipient is abuse@dynadot.com. The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.

ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.

Elapsed since first report
5 months
Reports sent
6
Latest case ID
PD-1772502396-riowax.com
Current status
HTTP 200 at latest stored check
Jump to section
Ringkasan laporan

riowax.com — Terakhir diketahui aktif (HTTP 200). Jenis penipuan: Social Media Phishing. Ringkasan bukti: VirusTotal 2/91 (Gridinsoft, SOCRadar); PhishDestroy score 66/100. Registrar: Dynadot.

Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.

Evidence Analysis

Ref EF8B0775

The domain riowax.com is a generic phishing site designed to deceive users through social media phishing tactics. It does not impersonate a specific brand or use a known drainer kit. As of the latest verification, riowax.com has been taken offline, reducing immediate risk to users, though its previous activity remains under investigation.

Technical indicators show that riowax.com had 0 of 95 VirusTotal vendors flagging it as malicious, and Google Safe Browsing did not list it as unsafe. The domain was registered through Dynadot LLC on March 04, 2026, and resolved to the IP address 23.35.29.9, hosted by Akamai Technologies in the US. It appeared on one security blocklist (PhishDestroy) and used an SSL certificate issued by Go Daddy Secure Certificate Authority - G2. The observed page title was 'riowax.com', and the site employed technologies such as PHP, Apache HTTP Server, jQuery, and Google Tag Manager. MX records pointed to 'park-mx.above.com', with nameservers at '5014.ns1.abovedomains.com' and '5014.ns2.abovedomains.com'.

Users who suspect they interacted with riowax.com should change any exposed credentials immediately, enable two-factor authentication on all accounts, and monitor for unauthorized activity. Report the domain to platforms like PhishTank, Google Safe Browsing, or local cybersecurity authorities to aid in broader mitigation efforts. If financial or cryptocurrency accounts were involved, review transaction histories and consider revoking any suspicious token approvals.

Stored source results

Recorded verdicts and infrastructure observations for this domain.

VirusTotal
VirusTotal
2 det.
URLScan
URLScan
Sertifikat TLS
Kedaluwarsa atau belum diverifikasi
Usia
5 mo
Status terpantau
Terakhir diketahui aktif 200
PhishDestroy
Daftar Hapus
Terdaftar
Reports Sent
6
Cakupan data12 recorded checks
VirusTotal 2 / 91 URLQuery tidak diperiksa PhishStats tidak diperiksa OTX no community references CF Radar scan completed URLScan capture laporan yang disimpan URLScan verdict Analisis selesai Pemblokiran DNS 14 diperiksa — tidak ada blokir TLS Kedaluwarsa atau belum diverifikasi WHOIS 5 mo old Tangkapan layar tangkapan eksternal Rantai pengalihan tidak diselidiki

Alur Tanggapan Ancaman Pipeline

Penemuan
Checks
Reports
Ketersediaan
17/18
Ancaman Telah Diterima
riowax.com telah terdeteksi dan dimasukkan ke dalam antrian untuk analisis menyeluruh
04/03/2026
URLScan.io Capture
Stored URLScan report with capture artifacts
24/03/2026
URLScan Verdict
Analisis URLScan selesai; hasil tangkapan web ini tidak mengubah keputusan ancaman halaman · score 0
29/07/2026
Cloudflare Radar Report
A stored Cloudflare Radar report is available. The report link alone is not a malicious verdict and does not prove that every network field was captured.
VirusTotal
2/91 recorded on VirusTotal
30/07/2026
Google Safe Browsing
05/03/2026
Forensic Evidence Collected
Stored evidence from URLScan.io, stored screenshot
24/03/2026
Technical Analysis Recorded
Laporan tersebut berisi teknologi tersimpan atau hasil analisis forensik.
09/08/2026
Cloudflare Radar Scan
Dipindai dengan Cloudflare Radar; analisis jaringan selesai.
05/03/2026
Initial Abuse Report (#1)
Sent to 1 abuse contact at Dynadot LLC with forensic evidence
abuse@dynadot.com
26/02/2026
ICANN Escalation #2
Escalation #2 sent to 3 recipients including ICANN Compliance — follow-up record after a previous report
abuse@dynadot.comabuse@verisign-grs.comcompliance@icann.org
03/03/2026
ICANN Escalation #3
Escalation #3 sent to 3 recipients including ICANN Compliance — follow-up record after multiple previous reports
abuse@dynadot.comabuse@verisign-grs.comcompliance@icann.org
22/04/2026
ICANN Escalation #4
Escalation #4 sent to 3 recipients including ICANN Compliance — follow-up record after multiple previous reports
abuse@dynadot.comabuse@verisign-grs.comcompliance@icann.org
26/04/2026
ICANN Escalation #5
Escalation #5 sent to 3 recipients including ICANN Compliance — follow-up record after multiple previous reports
abuse@dynadot.comabuse@verisign-grs.comcompliance@icann.org
28/04/2026
ICANN Escalation #6
Escalation #6 sent to 3 recipients including ICANN Compliance — follow-up record after multiple previous reports
abuse@dynadot.comabuse@verisign-grs.comcompliance@icann.org
05/05/2026
6 Reports Filed
6 report records were stored over 163 days; current observed status: Terakhir diketahui aktif
Daftar yang Dihapus Telah Dipublikasikan
04/03/2026
Monitoring Continues
Domain tetap dapat dijangkau atau aksesnya dibatasi; pemeriksaan di masa depan dapat memperbarui pengamatan ini.

Status Daftar Blokir Publik

Tangkapan tersimpan

Judul Halaman
riowax.com
Sertifikat TLS
Kedaluwarsa atau belum diverifikasi · Diterbitkan oleh Go Daddy Secure Certificate Authority - G2

Intelijen Domain

Domain
URLScan Verdict Analisis selesai score 0 report ↗
Server / ASN envoy · AS16625 AKAMAI-AS - Akamai Technologies, Inc., US
IP Context Akamai shared edge origin IP hidden Reputasi Edge-IP tidak dikaitkan dengan domain ini.
Registrar Dynadot US(US)
Alamat IP 23.35.29.9 CDN
LokasiUS Sterling, US
JaringanAS16625 · Akamai Technologies, Inc.
IP asal tersembunyi di balik proksi CDN. Hasil IP terbalik untuk alamat edge berisi penyewa yang tidak terkait; menemukan asal memerlukan DNS pasif atau data transparansi sertifikat.
PendaftaranDibuat 04/03/2026 (157d)
Elapsed Since First Report 10 days
Yang kami hitung Raw elapsed time since the first stored abuse report. It is not a registrar response-time measurement. Latest observed status: Terakhir diketahui aktif.
Minimum notice count 6 is the number of stored outgoing report records for this domain. It does not by itself prove acknowledgement or action by a recipient.
Isi setiap laporan Catatan laporan keluar yang disimpan dapat merujuk pada bukti yang tersedia pada saat itu, seperti keputusan vendor, data pendaftaran, detail hosting, klasifikasi, atau tangkapan layar. Halaman ini tidak menyimpulkan secara pasti muatan yang dikirimkan, penerimaan, pengakuan, atau tindakan oleh penerima.
ICANN RAA §3.18 The history below lists stored escalation records and timestamps. It does not by itself establish receipt, acknowledgement, compliance, or enforcement by any recipient.
Status HTTP200
Rincian teknisDNS, SAN SSL, cap waktu
Pertama Kali Terdeteksi04/03/2026
DOM Analysisanalyzed 11/07/2026score 48/100
IoC Extractionscanned 01/08/20260 wallet · 0 Telegram IoCs
Server nama5014.ns2.abovedomains.com
MX Records10 park-mx.above.com
Case ID
ICANN OVERSIGHT

Akreditasi dan konteks RAA

Registrar accreditation and DNS abuse obligations

For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.

Accreditation is a contract, not a safety certification.

RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.

Accountability draft Tidak ada yang dikirim secara otomatis.
Riwayat Laporan Penyalahgunaan · 6 stored reports over 68 days · click to expand
This timeline is built from stored outgoing report records. It documents timestamps and listed recipients, but does not by itself prove delivery, acknowledgement, or recipient action.
6 abuse reports filed over 163 days — latest observed status: Terakhir diketahui aktif
The records name Dynadot LLC as a recipient or subject. ICANN Compliance appears in the recipient field for at least one record.
6
reports
163
days
ICANN CC
  1. Report #1 Feb 26, 2026 · 22:39 UTC
    Phishing Abuse Report: riowax[.]com
    abuse@dynadot.com
  2. Report #2 ICANN CC 99h still active Mar 3, 2026 · 01:46 UTC
    ESCALATION #2 (99h active): Phishing - riowax[.]com
    abuse@dynadot.com abuse@verisign-grs.com compliance@icann.org
  3. Report #3 ICANN CC 1314h still active Apr 22, 2026 · 20:15 UTC
    ESCALATION #3 (1314h active): Phishing - riowax[.]com
    abuse@dynadot.com abuse@verisign-grs.com compliance@icann.org
  4. Report #4 ICANN CC 1407h still active Apr 26, 2026 · 17:16 UTC
    ESCALATION #4 (1407h active): Phishing - riowax[.]com
    abuse@dynadot.com abuse@verisign-grs.com compliance@icann.org
  5. Report #5 ICANN CC 1456h still active Apr 28, 2026 · 18:20 UTC
    ESCALATION #5 (1456h active): Phishing - riowax[.]com
    abuse@dynadot.com abuse@verisign-grs.com compliance@icann.org
  6. Report #6 ICANN CC 1614h still active May 5, 2026 · 08:36 UTC
    ESCALATION #6 (1614h active): Phishing - riowax[.]com
    abuse@dynadot.com abuse@verisign-grs.com compliance@icann.org
Record scope: the timeline documents outgoing records stored by PhishDestroy. Delivery, acknowledgement, and subsequent action require separate recipient or infrastructure evidence.
Teknologi · 7 identified
PHP
Programming languages

Server-side scripting language designed for web development.

Apache HTTP Server
Web servers

Most widely used open-source HTTP server software.

jQuery UI

Legacy JavaScript library — DOM manipulation and AJAX helpers. Still widely present on older sites.

J
jQuery CDN

Legacy JavaScript library — DOM manipulation and AJAX helpers. Still widely present on older sites.

jQuery
JavaScript libraries

Fast, small JavaScript library simplifying HTML manipulation, event handling, and Ajax.

Google Tag Manager
Tag managers

Tag management system for deploying marketing and analytics tags.

tagmanager.google.com
Contentsquare
Detected via Cloudflare Radar · Wappalyzer engine
Laporkan Domain Ini Kirimkan bukti & bantu lindungi orang lain

Analisis VirusTotal

2 / Vendor keamanan 91 menandai domain ini
View on VT
Last analyzed First positive detection Previous stored snapshot: 0 detections
Gridinsoft
SOCRadar
Analisis Performa Situs

Google PageSpeed Insights — mobile performance audit of riowax.com · checked Mar 5, 2026

48
Poor
Performance
FCP
2.94s
First Contentful Paint
LCP
22.68s
Largest Contentful Paint
CLS
0
Cumulative Layout Shift
TBT
551ms
Total Blocking Time
SI
8.18s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor
Bukti & Laporan EksternalIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
If credentials were compromised, report immediately. Do not engage with recovery scammers.

Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.

Europol
Temukan saluran pelaporan resmi untuk negara UE Anda
National police directory
Waspadalah terhadap penipu yang mengatasnamakan pemulihan! Penjahat dapat menghubungi korban lagi sambil berpura-pura menjadi penyelidik, pengacara, atau agen pemulihan. Jangan membayar biaya di muka atau membagikan kredensial. Pelajari lebih lanjut tentang penipuan dalam proses pemulihan →

Laporkan kepada Pihak Berwenang di Daerah Anda

Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.

Direktori 97 negara
Draf yang dibantu AI — detail insiden diproses oleh penyedia AI Tinjau dan kirimkan sendiri
Sematkan Laporan IniRead-only HTML widget
HTML · IFRAME

Sematkan Laporan Ini

Bagikan informasi ancaman ini di situs web atau blog Anda

embed.html
<iframe
  src="https://phishdestroy.io/id/embed/domain/riowax.com"
  title="PhishDestroy threat report for riowax.com"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>

Surat Terima Kasih yang Sangat Tulus

Pembuat draf satir

Penerima
Konteks biaya

Draf satir. Angka biaya merupakan perkiraan; tidak diklaim bahwa angka tersebut secara tepat terkait dengan domain ini.