reaperfin[.]com

The domain reaperfin.com is flagged as a high-risk generic phishing site, specifically impersonating the Reaper Financial brand. The site utilizes a page titled 'Reaper Financial (RPR) — Claim Allocation Portal Live on XRPL', which is indicative of an attempt to deceive users into submitting sensitive financial or wallet information. There is no explicit evidence of a drainer kit present, but the site's theme and claim portal functionality are consistent with common cryptocurrency phishing tactics.

Technical analysis reveals that reaperfin.com is detected by 1 out of 95 security vendors on VirusTotal, confirming low but present threat visibility. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP address 188.114.97.3. The SSL certificate is issued by Google Trust Services, and the site employs technologies such as HSTS, Cloudflare, and HTTP/3, which may be used to lend legitimacy and improve resilience against takedown efforts. The domain was created on July 01, 2026, a suspiciously recent registration date that further elevates risk. There is currently no explicit Google Safe Browsing warning, and blocklists show minimal coverage, but the combination of technical infrastructure and impersonation raises significant concern.

As of the latest review, reaperfin.com remains active and accessible. The low current detection rate may delay broader remediation or takedown actions, increasing user exposure to potential credential theft or financial loss. Users are strongly advised to avoid interacting with the site, especially with any claim or wallet connection features. Organizations should update security controls, monitor for related indicators, and consider implementing proactive network blocks to mitigate ongoing risk from this domain.