riversidecorp[.]net

The domain riversidecorp.net was registered on February 21, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently taken offline. DNS resolution points to 172.67.131.237, an address owned by Cloudflare (AS13335) located in the United States. The site lacked an SSL certificate at the time of analysis, and the page title returned by the HTTP service was "Riverside: HD Podcast & Video Software | Free Recording & Editing," which does not directly reference the targeted brand. Nevertheless, the domain is classified as a brand‑impersonation campaign targeting Apple, as indicated in the intelligence feed.

Detection signals show that four of ninety‑three VirusTotal scanners flagged the domain, and it appears on three commercial blocklists, specifically PhishDestroy, MetaMask, and SEAL. An AlienVault OTX pulse linked the domain to a single threat‑intel entry, reinforcing the suspicion of malicious use. Gridinsoft assigned a trust score of zero out of one hundred, and the overall risk rating is elevated.

While the site is no longer reachable, the observed infrastructure—Cloudflare hosting, public‑registry registration, and absence of TLS—suggests a low‑cost, fast‑flux approach typical of opportunistic impersonation campaigns. Defenders should continue to block the resolved IP address and the domain across DNS and web filters, monitor any future re‑registration attempts, and consider adding the domain to threat‑intel feeds to improve early detection. The lack of a certificate and the generic page title leave the exact payload or phishing page content uncertain, so additional sandbox or URL‑capture analysis would be required if the domain reappears.