rigel-bitrevo[.]today

This domain, rigel-bitrevo.today, is flagged as a generic phishing site targeting cryptocurrency users. Analysis indicates it impersonates a legitimate trading platform under the name 'Rigel Bitrevo,' offering fraudulent 'live signals' and 'market insights' to deceive victims into disclosing wallet credentials or transferring funds. The site employs social engineering tactics typical of crypto drainer kits, though no specific kit signature has been confirmed in this instance. The page title, 'Official Website | Rigel Bitrevo | Intelligent Crypto Analysis: Live Signals & Market Insights,' reinforces the false legitimacy of the operation. Technical indicators confirm elevated risk. The domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently associated with malicious domains. It resolves to IP address 188.114.97.3, a Cloudflare node commonly used to obfuscate hosting origins. VirusTotal detection shows 1/95 security vendors flagging the domain, while it appears on a single security blocklist. The site uses Google Trust Services for SSL certification, HSTS, and HTTP/3, alongside Envoy and Cloudflare technologies, suggesting an attempt to mimic secure and modern web infrastructure. No Google Safe Browsing (GSB) flags were recorded at the time of assessment. The domain is currently offline, likely due to takedown or abandonment by the threat actor. However, residual risk remains for users who may have interacted with the site prior to its deactivation. Historical DNS records and cached content could still be exploited in follow-up attacks. Organizations and individuals are advised to block the domain and IP at the network level, revoke any credentials potentially exposed to the site, and monitor for unauthorized transactions. Users should verify crypto platforms through official channels and avoid engaging with unsolicited market analysis offers.