superliga168[.]com

PhishDestroy identifies superliga168.com as a cryptocurrency drainer posing as a crypto gaming platform. The domain was flagged for hosting fake deposit interfaces designed to siphon funds from unsuspecting users’ wallets. Technical analysis reveals the site resolves to IP 92.243.74.3 and leverages a recently issued Google Trust Services SSL certificate to appear legitimate. Registrar data shows the domain was created on June 13, 2024, through NameCheap, Inc., a pattern consistent with short-lived malicious domains designed to evade detection. This domain exhibits clear red flags across multiple threat intelligence layers. VirusTotal currently reports 0 detections out of 95 engines, indicating low initial signature coverage despite active malicious behavior. The domain’s recent creation date (June 13, 2024) and use of a Google-issued SSL certificate represent a sophisticated evasion tactic, as certificates from trusted authorities can bypass some browser-based security checks. Further, the lack of detection aligns with the domain’s emerging status, suggesting it is in the early stages of a campaign targeting crypto enthusiasts. If users have visited superliga168.com, they should immediately revoke any connected wallet permissions and transfer remaining assets to a clean wallet. Do not interact with any prompts for wallet connections or deposits. Scan all devices used for crypto activities with updated antivirus software and consider using hardware wallets for enhanced security. Report the domain to your antivirus provider and local cybercrime units to aid in takedown efforts. Users should also monitor their transaction history for unauthorized transfers and enable multi-factor authentication on all related accounts.