pc[.]riverglobalfx[.]com

The domain pc.riverglobalfx.com is currently active and has been identified as a social media phishing infrastructure. The site returns an HTTP 301 redirect and its page title reports "riverglobalfx.com | 522: Connection timed out," indicating that the underlying service is inaccessible at the time of observation. The domain was registered on February 21, 2026 through Gname.com Pte. Ltd. and is hosted on Cloudflare's network (ASN 13335). DNS resolution points to the IP address 104.21.112.1, which belongs to a Cloudflare edge node located in the United States. The domain uses Cloudflare's DNS services with nameservers terin.ns.cloudflare.com and walk.ns.cloudflare.com, and the TLS certificate is issued by Google Trust Services under the WE1 profile, confirming the use of standard HTTPS encryption.

Security telemetry shows that the domain is listed on a single blocklist and has been flagged by PhishDestroy. VirusTotal analysis reports that one out of ninety‑five security vendors flagged the domain, reinforcing the suspicion of malicious activity. The risk level is classified as high, and the threat type is recorded as generic_phishing. The observed technologies include Cloudflare and HTTP/3, which are commonly leveraged to provide fast and resilient delivery for malicious payloads.

While the available data confirms the presence of phishing indicators, the specific content served by the site remains unverified because the endpoint returns a timeout error. Consequently, the exact phishing lure or credential‑capture mechanism cannot be confirmed at this time. Defenders should treat pc.riverglobalfx.com as a malicious indicator, block network communications to its IP address and associated hostnames, and add the domain to internal blocklists. Continuous monitoring of the domain's activity, including any changes to its DNS records or HTTP response codes, is recommended to detect potential shifts in its operational tactics.