benqi-fiupdates[.]live

benqi-fiupdates.live has been identified as a high-risk credential phishing domain. This site specifically targets users by impersonating BENQI, a known brand, to steal sensitive login credentials. The threat it poses is significant due to its active status and deceptive presentation designed to trick users into divulging personal information.

Detailed threat intelligence reveals that benqi-fiupdates.live resolves to the IP address 188.114.96.3 and was registered on April 4, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. Although it uses a Let's Encrypt SSL certificate to appear legitimate, VirusTotal detection is low with only 2 out of 95 security vendors flagging the domain to date. Despite this, the domain remains active and is highly suspicious given its impersonation tactics. No additional blocklist data is noted, but its combination of a recent creation date and the use of a free SSL certificate typically correlates with phishing infrastructure.

To mitigate risks associated with benqi-fiupdates.live, users should avoid interacting with this domain and refrain from entering any credentials or personal details. Network defenders are advised to block access to the IP 188.114.96.3 and monitor for any communications referencing benqi-fiupdates.live. Implementing DNS filtering and educating users on identifying phishing pages, especially those mimicking well-known brands like BENQI, will reduce exposure to this threat. Prompt reporting and takedown requests to the registrar NICENIC INTERNATIONAL GROUP CO., LIMITED are also recommended to disrupt the attacker’s infrastructure.