justiceforiryna[.]com

Analysis of justiceforiryna.com shows an active generic_phishing campaign hosted behind Cloudflare’s network (AS13335). The domain was registered on September 08, 2025 through Tucows Domains Inc. and resolves to IP 172.67.133.151, located in the United States. The site presents a single page with the title "Just a moment..." and returns HTTP 403, indicating that content is likely gated behind a challenge page. TLS is provided by Google Trust Services under the WE1 certificate, confirming a valid HTTPS endpoint. VirusTotal scans report that 2 of 95 security vendors flagged the domain, and the domain is already listed on two public blocklists, including PhishDestroy and ScamSniffer. Nameservers aron.ns.cloudflare.com and julian.ns.cloudflare.com further confirm reliance on Cloudflare DNS. While the page content has not been publicly disclosed, the combination of a recent registration, Cloudflare front‑end, and early vendor detections aligns with typical phishing infrastructure. Defenders should block the domain and its resolved IP at perimeter and endpoint controls, monitor DNS queries for the associated nameservers, and consider adding the IP to threat‑intel feeds. Ongoing observation is advised to capture any payload or credential‑stealing activity that may emerge if the site transitions from a challenge page to a full phishing landing page.