liniea[.]build

The domain liniea.build was a brand-impersonation phishing site targeting users of Linea, a known blockchain platform. It posed as an official Linea portal to deceive visitors into disclosing login credentials or other sensitive information through a credential-harvesting scheme. No crypto drainer kit was identified. The site liniea.build is currently taken offline and no longer accessible.

Technical indicators show liniea.build was registered through NameCheap, Inc. on September 23, 2025. It resolved to the IP address 188.114.97.3, hosted on Cloudflare infrastructure in the US. At the time of analysis, 2 of 95 VirusTotal security vendors flagged the domain, while Google Safe Browsing had not marked it as malicious. The domain appeared on 1 security blocklist, specifically PhishDestroy. No SSL certificate was issued, and the observed page title was 'Error'. Nameservers were christian.ns.cloudflare.com and lindsey.ns.cloudflare.com. Gridinsoft assigned a trust score of 0 out of 100.

Users who interacted with liniea.build should immediately change any passwords or credentials entered on the site, enable two-factor authentication on all accounts, and monitor for unauthorized access or fraudulent transactions. If cryptocurrency wallets were connected, revoke any token approvals granted to unknown contracts. Report the phishing domain to the impersonated brand’s security team and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in takedown efforts.