liberty-trustunion[.]us

The domain liberty-trustunion.us is a phishing site engaged in brand impersonation, specifically targeting Facebook users. It presents itself as a legitimate financial institution under the name 'Liberty Trust Union Bank' but is designed to deceive victims into disclosing login credentials or personal information. No crypto drainer kit was identified in this campaign. As of the latest verification, liberty-trustunion.us has been taken offline.

Technical indicators confirm the malicious nature of liberty-trustunion.us. The domain was flagged by 1 of 95 security vendors on VirusTotal, including Netcraft, and appears on 1 security blocklist (PhishDestroy). It was registered through OwnRegistrar, Inc. on May 14, 2025, and resolves to the IP address 163.61.188.89, located in the US under AS153568 (NEW DHAKA HARDWARE). No SSL certificate was issued for the domain, and its nameservers are listed as null, vip1.cupisweb.com, and vip2.cupisweb.com. The observed page title was 'Liberty Trust Union Bank,' reinforcing its impersonation of a financial entity rather than Facebook directly.

Individuals who interacted with liberty-trustunion.us should immediately change any passwords entered on the site, particularly for Facebook or linked accounts. Enable two-factor authentication (2FA) on all critical services to mitigate further risk. Monitor financial accounts and credit reports for unauthorized activity, as stolen credentials may be used for fraud. Report the phishing domain to Google Safe Browsing, the Federal Trade Commission (FTC), and the Anti-Phishing Working Group (APWG) to assist in broader takedown efforts.