rektcoin[.]top

Analysis of rektcoin.top indicates that the domain was registered on February 21, 2026 through Eranet International Limited and subsequently pointed to the IP address 188.114.97.3, which belongs to AS13335 operated by Cloudflare, Inc. The hosting location is identified as the United States. The domain resolves to a Cloudflare front‑end without an SSL certificate, exposing any traffic to clear‑text interception. HTTP requests return a minimal page whose title is “Just a moment…”, and the service has been taken offline at the time of assessment. Infrastructure evidence shows the authoritative nameservers aryanna.ns.cloudflare.com and austin.ns.cloudflare.com, both Cloudflare‑managed.

Reputation data reveal that the domain appears on a single security blocklist and has been flagged by PhishDestroy. VirusTotal reports that four of ninety‑five scanned security vendors marked the domain as malicious, providing additional corroboration of malicious intent. Independent scoring from Gridinsoft assigns a trust score of zero out of one hundred, reflecting an extremely low confidence in the domain’s legitimacy. No SSL certificate is present, further confirming the lack of standard security controls.

The combination of recent registration, use of Cloudflare’s free DNS service, absence of TLS, low trust scoring, and detections by multiple vendors aligns with a typical phishing infrastructure. Defenders should add rektcoin.top to domain‑blocklists, enforce DNS sinkholing, and monitor outbound connections to the associated IP address. Continuous re‑evaluation is advised in case the site is re‑activated, and any observed traffic should be logged for forensic correlation with known phishing campaigns.