libertyswap-finance[.]pages[.]dev

This domain, libertyswap-finance.pages.dev, is identified as a cryptocurrency wallet phishing site targeting users of decentralized applications (dApps). The page, titled DebbugDappNode, presents itself as a legitimate dApp interface but is designed to harvest wallet credentials and private keys. As of the latest assessment, the domain has been taken offline, though prior activity indicates an elevated risk level due to its targeted nature and technical sophistication. Analysis of the domain reveals it was flagged by 11 out of 95 security vendors on VirusTotal, indicating moderate to high confidence in its malicious classification. The domain is registered through Cloudflare, Inc., and resolves to the IP address 172.66.47.131. It appears on one security blocklist, and its SSL certificate is issued by Let's Encrypt, a common tactic to lend false legitimacy. The domain was created on March 31, 2026, which is anomalous given the current date, suggesting potential domain spoofing or backdating. Infrastructure analysis indicates the use of HTTP/3, HSTS, and Cloudflare technologies, which are often exploited to obfuscate malicious activity. The Gridinsoft trust score for this domain is 0/100, reinforcing its classification as high-risk. The domain is currently offline, reducing immediate exposure; however, similar phishing campaigns often resurface under different domains or infrastructure. Organizations and individuals are advised to block the domain and its associated IP (172.66.47.131) at the network level. End-users should verify the authenticity of any dApp interface by cross-referencing official project documentation or community channels. Security teams are recommended to monitor for related indicators of compromise, such as unusual wallet transaction patterns or unauthorized access attempts. Proactive measures, including browser-based phishing protection and endpoint detection rules, should be implemented to mitigate future risks from similar threats.