dashboard-liquidbsc[.]com

This domain, dashboard-liquidbsc.com, is identified as a crypto drainer phishing site specifically designed to impersonate LiquidBNB, a cryptocurrency platform. The site is currently offline, but prior analysis confirms its malicious intent to harvest credentials and drain digital assets from unsuspecting users. Analysis indicates the domain was flagged by 4 of 95 security vendors on VirusTotal, a relatively low but notable detection rate that suggests targeted or evasive tactics. It was registered on March 27, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. The domain resolved to IP address 172.67.207.174, which is part of a network known for hosting malicious infrastructure. It appeared on one security blocklist, and its page title, "LiquidBNB," directly mimics the legitimate brand. Technologies detected on the site include AngularJS, jQuery, and Cloudflare, which are commonly used in both legitimate and malicious web applications. Infrastructure analysis reveals the domain leveraged Cloudflare services, likely to obfuscate its true origin and evade detection. The use of HTTP/3 and Cloudflare Browser Insights further indicates an attempt to appear modern and legitimate. Given the domain's current offline status, it may have been taken down due to enforcement actions or operational shifts by the threat actors. Organizations and users are advised to block the domain and its associated IP at the network level. Security teams should monitor for similar domains registered through NICENIC INTERNATIONAL GROUP CO., LIMITED or resolving to the same IP range. Users who interacted with this domain should assume credential compromise and initiate account recovery procedures, including revoking active sessions and enabling multi-factor authentication on all cryptocurrency-related accounts.