qfsasset-backup[.]com

The domain qfsasset-backup.com is a confirmed brand impersonation phishing website targeting Coinbase users. It poses as a cryptocurrency buy-and-sell marketplace under the page title 'Home - WalletconnectWeb3 - A crypto buy and sell marketplace' and is designed to steal login credentials or cryptocurrency assets. The site has been taken offline, but its prior activity posed an elevated risk to users. No drainer kit was identified on this domain.

Technical analysis of qfsasset-backup.com reveals it was flagged by 1 of 95 VirusTotal vendors, including Gridinsoft, which assigned it a trust score of 0 out of 100. The domain was created on February 21, 2026, and resolves to IP address 172.245.14.131, hosted in the US by AS36352 HostPapa. It appears on 4 security blocklists: PhishDestroy, Polkadot, Enkrypt, and Codeesura. Google Safe Browsing did not flag the domain. The SSL certificate was issued by R11. The registrar information is not available.

Users who interacted with qfsasset-backup.com should take immediate safety steps. Since this is a cryptocurrency phishing site, victims should revoke any token approvals granted to the domain and move all funds to a new, secure wallet. If credentials were entered, change passwords for all affected accounts and enable two-factor authentication. Monitor accounts for unauthorized transactions. Report the domain to Google Safe Browsing and the impersonated brand, Coinbase, through their official security channels.