rizveco[.]click

PhishDestroy identifies rizveco.click as an active crypto drainer posing as legitimate cryptocurrency service portals. The domain is currently operational and distributing malicious payloads to unsuspecting users. Initial access vectors appear to leverage social engineering tactics, including fake login prompts and fraudulent transaction confirmations.

This domain was flagged by 2 of 95 VirusTotal security vendors, indicating limited but notable detection coverage. Registered through DYNADOT LLC, rizveco.click resolves to IP 147.45.41.219 and was created on March 28, 2026. The domain utilizes a Let's Encrypt SSL certificate, further enhancing its deceptive appearance. Trust scores remain critically low due to its recent emergence and malicious intent.

Users are strongly advised to avoid interacting with rizveco.click or any associated subdomains. Block this domain at the network and endpoint levels using DNS filtering or firewall rules. If exposure occurs, inspect devices for unauthorized cryptocurrency wallet connections or unusual transaction approvals. Report indicators to PhishDestroy for proactive threat intelligence updates.