rapidovexalith[.]net

The domain rapidovexalith.net was registered on February 21, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the Cloudflare‑hosted address 172.67.223.37, which is attributed to AS13335 in the United States. No TLS certificate is presented, indicating the site was served over plain HTTP before being taken offline. The page title retrieved during the brief live window reads "Rápido Vexalith - Plataforma Oficial | Trading IA 2026," and the threat is classified as a brand‑impersonation scam targeting the generic brand identifier "base".

Infrastructure analysis shows the domain is listed on three security blocklists—PhishDestroy, MetaMask, and SEAL—and has a Gridinsoft trust score of 0 out of 100, reflecting an extremely low reputation. AlienVault OTX records a single pulse referencing the domain, and VirusTotal reports that 16 of 93 scanning engines flag it as malicious, reinforcing the consensus that the site is used for fraudulent purposes. Nameservers kaiser.ns.cloudflare.com and zoe.ns.cloudflare.com confirm the reliance on Cloudflare’s DNS service.

The site’s current status is offline, but the historical evidence suggests active exploitation before takedown. Defenders should continue to block the domain at perimeter and endpoint layers, ensure existing blocklist subscriptions are updated, and monitor for any resurgence of the same IP or nameserver pair in new malicious registrations. Because the page content beyond the title has not been captured, analysts should treat any future sightings as potentially high‑risk until a full content analysis can be performed.