biqanex[.]com

Biqanex.com is an active phishing domain that targets cryptocurrency enthusiasts by impersonating Ethereum. This fake exchange site uses the guise of a legitimate platform to deceive users into divulging sensitive information. PhishDestroy identified this threat shortly after its domain creation on June 16, 2026, with the first detection on June 20, 2026. The site is currently flagged by 1 out of 91 vendors on VirusTotal and is listed on 1 public blocklist, including PhishDestroy's own.

The domain is registered with NICENIC INTERNATIONAL GROUP CO., LIMITED and hosted on an IP address managed by Cloudflare, Inc., located in the United States. The SSL certificate is issued by Google Trust Services, which might give a false sense of security to potential victims. The page title suggests a legitimate cryptocurrency exchange, offering services to buy and sell Bitcoin and Ethereum, which aligns with the impersonated brand.

Despite the low detection rate on VirusTotal, the platform risk score is notably high at 81/100, indicating a significant threat level. The phishing operation exploits the time gap between domain registration and widespread detection by antivirus vendors. This early detection by PhishDestroy highlights the importance of proactive threat intelligence in identifying fresh threats before they propagate widely.

The use of a reputable SSL issuer and hosting provider may help the site appear legitimate to unsuspecting users. However, the presence on a public blocklist and the specific targeting of Ethereum users underscore the site's malicious intent. This case exemplifies the ongoing threat posed by phishing domains that leverage cryptocurrency's popularity to lure victims into scams.