alfjeqlqf[.]top

This domain, alfjeqlqf.top, represents a targeted brand impersonation threat designed to deceive users into disclosing cryptocurrency exchange credentials. Analysis confirms the domain mimics Coinbase login interfaces, presenting a high-risk phishing vector for individuals attempting to access their digital asset accounts. The page title explicitly displays 'Coinbase,' reinforcing the false legitimacy of the fraudulent infrastructure to manipulate victims into entering sensitive authentication details. Infrastructure analysis reveals multiple technical indicators supporting the malicious classification of alfjeqlqf.top. The domain was registered on October 28, 2025, through Dominet (HK) Limited, a registrar frequently associated with abusive registrations. It resolves to the IP address 188.114.96.3, hosted on AS13335 (Cloudflare, Inc.), a network commonly leveraged to obscure phishing origin points. Security validation shows 18 out of 95 antivirus engines on VirusTotal flag the domain as malicious, while Google Safe Browsing categorizes it as a phishing site. Additionally, the domain appears on one security blocklist and lacks an SSL certificate, further reducing its perceived authenticity. Users who accessed alfjeqlqf.top should assume credential compromise and take immediate remediation steps. First, revoke any active sessions on the legitimate Coinbase platform and reset account passwords using a secure, non-compromised device. Enable multi-factor authentication if not already active, utilizing hardware-based or app-generated tokens rather than SMS. Monitor linked financial accounts and cryptocurrency wallets for unauthorized transactions, and report any suspicious activity to the exchange’s fraud team. If payment details were entered, contact financial institutions to block potential fraudulent charges. Finally, scan local devices for malware using updated security tools to detect secondary infections.