alfaminefx[.]pro

The domain alfaminefx.pro was a phishing site engaged in brand impersonation targeting users of the cryptocurrency platform 'across'. It posed as a legitimate service to deceive victims into disclosing sensitive information or performing actions that could compromise their accounts. As of the latest verification, alfaminefx.pro has been taken offline, though it previously operated without a known crypto drainer kit.

Technical indicators confirm the domain's malicious intent. Alfaminefx.pro was flagged by 1 of 95 security vendors on VirusTotal, including SOCRadar, and appeared on 1 security blocklist (PhishDestroy). The domain was registered through Spaceship, Inc. on June 02, 2025, and resolved to the IP address 198.251.89.220, hosted by FranTech Solutions in the US (AS53667). No SSL certificate was available, and the observed page title was 'Alfamine - Crypto Miner'. The domain was also listed in 1 AlienVault OTX threat intelligence pulse, with trust scores of 0/100 (Gridinsoft) and 1/100 (Scamadviser).

Users who interacted with alfaminefx.pro should immediately change passwords for any accounts accessed through the site, enable two-factor authentication (2FA), and monitor for unauthorized transactions or login attempts. If cryptocurrency wallets were connected, revoke any token approvals granted to the site and consider transferring funds to a new wallet. Report the domain to relevant platforms, such as Google Safe Browsing, anti-phishing organizations, or the impersonated brand 'across' for further investigation.