riyadafinatur[.]com

Analysis of riyadafinatur.com as of July 21 2026 shows that the domain was registered through Dynadot Inc on 2025-12-09. The authoritative name servers are jobs.ns.cloudflare.com and tara.ns.cloudflare.com, and DNS resolution returns the IPv4 address 104.21.26.56, which is associated with Cloudflare’s edge network. The domain appears on a single external blocklist and is actively blocked by the PhishDestroy feed, indicating that at least one security‑vendor has classified it as malicious. VirusTotal records indicate that the domain has been examined by ninety‑five scanning engines; none of those engines currently report a detection, but the absence of detections does not constitute a safety guarantee. No public information about SSL certificate details, HTTP response codes, page title, or content has been released, so the surface‑level characteristics of the web page remain unknown. The limited visibility of the infrastructure, combined with its recent creation date (less than eight months old) and placement on a phishing‑related blocklist, suggests a higher likelihood of abuse. Defenders should consider adding the domain and its resolved IP address to network‑level deny lists, enforce DNS filtering that references the PhishDestroy feed, and monitor for any outbound connections to the IP. Additional investigative steps include retrieving the TLS certificate, performing a live HTTP fetch to capture page metadata, and checking for any associated URLs in threat‑intel platforms such as OTX. Until further evidence is gathered, the domain should be treated as a potential phishing threat and handled with appropriate caution.