afinilrapid[.]com

Analysis indicates that afinilrapid.com is an active phishing site, characterized by its attempt to deceive users into purchasing pharmaceuticals under false pretenses. The domain was created on April 28, 2026, and has since been flagged in 23 threat intelligence pulses on AlienVault OTX, indicating a significant level of documented malicious activity. Moreover, the domain is currently listed on two security blocklists, and has been flagged by three out of 95 security vendors on VirusTotal, reinforcing its classification as a threat. The domain is also blocked by PhishDestroy and BLP-Malware.

The site employs technologies commonly associated with e-commerce and content management, including WordPress and Shopify, suggesting a well-structured interface intended to mimic legitimate online pharmacies. The page title, 'Rapidfinil – Buy Modafinil USA 3 day Delivery', further indicates that it markets itself as a quick-delivery service for pharmaceuticals, which is a common tactic used by phishing sites to lure unsuspecting users.

The domain resolves to the IP address 192.138.189.249, which should be monitored for further malicious activity associated with this threat. The SSL certificate is issued by Let's Encrypt, a commonly used certificate authority, adding to the site's legitimacy facade despite its fraudulent intent. Trust scores vary significantly, with Scamadviser scoring the site at 41/100 and Gridinsoft at 0/100, highlighting a divided reputation and a lack of confidence in the site's integrity.

Defenders are urged to block traffic to afinilrapid.com and monitor any transactions or communications that may reference this domain. Continued vigilance regarding new registrations and similar domains is essential to mitigate the risks posed by this and related phishing operations.