firmezavaultaris[.]net

The domain firmezavaultaris.net has been identified as a high-risk brand impersonation scam targeting the base brand. The site is currently offline, but it remains a significant threat due to its malicious intent and the potential for reactivation.

Analysis indicates that firmezavaultaris.net was registered on February 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. The domain resolves to the IP address 188.114.97.3, which is located in the United States and is associated with AS13335 Cloudflare, Inc. The domain lacks an SSL certificate, further raising suspicions about its legitimacy. VirusTotal, a widely used threat intelligence platform, flagged the domain as malicious, with 13 out of 95 security vendors identifying it as a threat. The site was also listed on three security blocklists: PhishDestroy, MetaMask, and SEAL. The page title found during the analysis was 'Firmeza Vaultaris - Plataforma Oficial | Trading IA 2026', which closely mimics the official branding of the base entity, indicating a deliberate attempt to deceive users.

Given the current status of the domain being offline, it is recommended that network administrators and security teams continue to monitor for any signs of reactivation. Users should be educated to recognize and avoid suspicious links and phishing attempts. Additionally, implementing DNS-based blocking and updating security policies to include specific measures against brand impersonation can help mitigate the risk of future incidents involving this domain or similar threats.