liquiddex[.]app

The domain liquiddex.app was registered on March 11 2026 through Name.com, Inc. It resolves to the IPv4 address 64.29.17.65, which is hosted by Vercel, Inc. in the United States. DNS is served by ns1.vercel-dns.com and ns2.vercel-dns.com, and the site presents a valid Let's Encrypt certificate (R12) with HSTS enabled. An HTTP request returns a 200 status code and the page title is reported as “Liquid DEX”. The front‑end stack includes Node.js, React, Next.js and Webpack, while the back‑end appears to use Zoho services, as indicated by MX records pointing to mx.zoho.com (priority 10) and mx2.zoho.com (priority 20). VirusTotal analysis shows 11 of 91 security vendors flag the domain, and Gridinsoft assigns a trust score of 0 / 100. The domain is listed on three public blocklists and is actively blocked by PhishDestroy, MetaMask and SEAL. Current intelligence classifies the site as a generic phishing operation and the status is marked active. Evidence beyond the infrastructure and the generic phishing label is not publicly available; the specific content or credential‑collection mechanisms have not been observed. Defenders should add liquiddex.app to network and email filtering policies, monitor DNS queries for the associated IP and nameservers, and incorporate the domain into threat‑intel feeds. Users should be warned that any unsolicited communications referencing “Liquid DEX” are likely malicious, and they should avoid interacting with the site or providing credentials.