rizowex[.]com

This domain, rizowex.com, is identified as a brand impersonation threat specifically targeting users of cryptocurrency-based gambling platforms. Analysis indicates the site mimics a legitimate online crypto casino, presenting itself under the title 'Rizowex: Most Popular Online Crypto Casino Based on Blockchain.' No associated drainer kit has been confirmed, but the domain’s structure and branding align with known tactics used to deceive users into depositing cryptocurrency under false pretenses. Infrastructure analysis reveals the domain was registered on October 8, 2025, through Dominet (HK) Limited, a registrar based in Hong Kong. It resolves to the IP address 104.21.14.71, hosted on AS13335 Cloudflare, Inc., a common proxy service used to obscure malicious infrastructure. At the time of assessment, VirusTotal reported 10 out of 95 security vendors flagging the domain as malicious. The domain appears on a single security blocklist and is not currently listed in Google Safe Browsing. Notably, the site lacks an SSL certificate, increasing the risk of credential interception or man-in-the-middle attacks. As of the latest verification, rizowex.com has been taken offline, likely in response to security vendor detections or registrar enforcement actions. However, the elevated risk persists due to the domain’s recent creation and the potential for threat actors to re-deploy the infrastructure under a new name or IP. Users are advised to verify gambling platforms through official channels, avoid interacting with unsecured domains, and monitor wallet addresses for unauthorized transactions. Organizations should update blocklists to include this domain and its associated IP to prevent future access attempts.