altadefinizionegratis[.]group

This domain, altadefinizionegratis.group, is actively flagged as a high-risk crypto drainer campaign impersonating a film streaming service. Registered on February 21, 2026, through NiceNIC International Group Co., Limited, the domain resolves to IP 104.21.4.20, hosted on Cloudflare's network (AS13335). Infrastructure analysis reveals the use of Cloudflare nameservers (dawn.ns.cloudflare.com, brett.ns.cloudflare.com) and an SSL certificate issued by Google Trust Services (WE1), which may provide a false sense of legitimacy to visitors. The page title, 'Altadefinizione (2026) - Guarda film streaming in Altadefinizione,' suggests an attempt to mimic a legitimate Italian streaming platform, though the exact content and mechanisms of the crypto drainer are not yet analyzed. Defenders should note that the domain is currently active, returning an HTTP 301 redirect, which may indicate a gateway to malicious infrastructure. Technologies detected include Bootstrap, OWL Carousel, jQuery, and Liveinternet, alongside HTTP/3 and HSTS, which are consistent with modern web applications but do not preclude malicious intent. Gridinsoft assigns a trust score of 0/100, and the domain appears on at least one security blocklist. While four of ninety-three security vendors on VirusTotal flagged the domain, this does not confirm universal detection, and defenders should not rely solely on this metric for assessment. Given the high-risk classification and active status, organizations should prioritize blocking this domain at the DNS or proxy level. Monitoring for associated IPs (104.21.4.20) and related Cloudflare-hosted domains may help identify further campaign infrastructure. The lack of confirmed brand impersonation beyond the page title warrants caution, as the site may pivot to other scam types or targets.