rizzmas[.]network

The domain rizzmas.network is currently classified as a generic_phishing site with a high risk rating and an active status as of July 12, 2026. The page title returned by the server is "Nur einen Moment…", indicating that the site is presenting a single, likely placeholder, response. No additional content has been publicly disclosed, leaving the exact phishing payload or credential‑harvesting mechanism unverified.

Infrastructure analysis shows that rizzmas.network was registered through Cloudflare, Inc., and resolves to the IP address 188.114.96.3, which belongs to AS13335 (Cloudflare, Inc.) and is geolocated in the United States. The domain uses the nameservers lovisa.ns.cloudflare.com and noel.ns.cloudflare.com, both operated by Cloudflare. TLS termination is provided by a Google Trust Services certificate labeled WE1, and the site advertises Cloudflare Browser Insights, Cloudflare, and HTTP/3 as underlying technologies.

Reputation monitoring indicates that the site returns an HTTP 403 status code, receives a Gridinsoft trust score of 0 out of 100, and appears on one security blocklist. VirusTotal scans show that 2 out of 95 security vendors flagged the domain as malicious, and it is listed as blocked by PhishDestroy. These signals collectively reinforce the high‑risk assessment despite the relatively low vendor count on VirusTotal.

Defenders should immediately block outbound traffic to 188.114.96.3 and add rizzmas.network to DNS sinkhole or firewall deny lists. Continuous monitoring of the domain’s DNS records and any changes to its SSL certificate or HTTP response codes is recommended. Given the low trust score and presence on a blocklist, organizations should also consider sharing indicators of compromise with threat‑intelligence sharing platforms to aid broader detection and mitigation efforts.