rapidofintoris[.]net

Analysis of rapidofintoris.net indicates a brand‑impersonation campaign targeting the base brand, presented as a crypto‑focused platform. The domain was registered on February 24, 2026 and is currently taken offline, suggesting the operators have either ceased activity or are rotating infrastructure. DNS resolution points to IP address 188.114.96.3, which belongs to the Cloudflare network (AS13335) and is geolocated in the United States. The hosting choice aligns with typical fast‑flux or anonymisation tactics used by financially motivated actors. The site presented the page title "Rapido Fintoris - Piattaforma Ufficiale Italia | Trading IA 2025," implying a fraudulent Italian trading service that claims to offer investment opportunities for the year 2025.

The scam type is explicitly identified as a crypto scam, reinforcing the likelihood of monetary theft attempts. Security‑vendor scans on VirusTotal show that six of ninety‑three scanners flagged the domain as malicious, providing independent corroboration of its illicit nature. Additional defensive services have listed the domain on blocklists, including PhishDestroy, MetaMask, and SEAL, and three broader security blocklists also contain the host. Reputation systems reflect a poor trust posture: Gridinsoft assigns a score of 0 out of 100, while Scamadviser rates the domain at 31 out of 100, both indicating a high probability of malicious intent. Registration details reveal the domain was obtained through PDR Ltd operating as PublicDomainRegistry.com, a registrar frequently observed in abuse reports.

The SSL certificate is labeled WE1, but no further validation data is available, limiting confidence in its authenticity. Defenders should immediately block rapidofintoris.net at perimeter and endpoint layers, monitor outbound connections to 188.114.96.3, and consider adding the IP to threat‑intel feeds.