saudiprem[.]net

PhishDestroy has identified saudiprem.net as a confirmed phishing site, specifically targeting Saudi Arabian consumers with a fake online storefront impersonating a legitimate Saudi brand. The domain is currently offline, but its recent activity posed a significant threat to users seeking to make purchases online.

Analysis of the domain reveals several technical indicators of malicious intent. The site was registered through GoDaddy.com, LLC on April 24, 2026, a future date that suggests data manipulation or an error, but the domain was observed active recently. It resolves to IP address 172.67.216.151, which is associated with Cloudflare. The SSL certificate was issued by Google Trust Services (WE1), lending a false sense of legitimacy. Despite being flagged in 1 AlienVault OTX threat intelligence pulse and appearing on 1 security blocklist, VirusTotal shows 0 detections out of 95 vendors, indicating that the site evaded initial scanning. The page title "متجر سعودي بريم" translates to "Saudi Premium Store," which is designed to deceive users into believing it is a legitimate Saudi e-commerce platform.

Given the domain's confirmed phishing nature and its targeting of Saudi users, the risk to individuals is high if they had visited the site while it was active. PhishDestroy recommends that users avoid any interaction with saudiprem.net and ensure their devices are scanned for malware if they accessed the site. Future vigilance is advised when encountering similar domains that impersonate trusted brands, especially those with recent registration dates and mismatched trust indicators.