alffa[.]cash

The domain alffa.cash is a phishing site engaged in brand impersonation, specifically targeting Ethereum. This domain poses an elevated risk and has been taken offline. It was previously used to trick users into believing they were interacting with a legitimate cryptocurrency service, potentially leading to financial loss or theft of personal information.

alffa.cash was registered through NiceNIC International Group Co., Limited on February 21, 2026. The domain resolves to the IP address 188.114.97.3, which is located in the US and associated with AS13335 Cloudflare, Inc. According to VirusTotal, 2 of 95 security vendors flagged this domain, including Fortinet and SOCRadar. The site appears on 1 security blocklist, PhishDestroy, and has an SSL certificate issued by Google Trust Services / WE1. The page title observed was 'Alfacash - Buy, Sell & Exchange Bitcoin, Litecoin, Ethereum, XRP, EOS, Tether and many other digital assets and blockchain tokens.'

If users have interacted with alffa.cash, they should take immediate steps to secure their accounts. For cryptocurrency-related scams, it is crucial to revoke any token approvals and move funds to a new, secure wallet. For credential or login phishing, users should change their passwords, enable two-factor authentication, and monitor their accounts for any unauthorized activity. Additionally, users can report this phishing domain to their respective cryptocurrency exchanges, email providers, and local authorities to help prevent further incidents.