liquidity-pool[.]com

This domain, liquidity-pool.com, is identified as a fraudulent crypto liquidity scam designed to steal credentials and drain digital assets from unsuspecting users. Analysis indicates the site mimics legitimate decentralized finance (DeFi) liquidity pool platforms, likely targeting cryptocurrency holders seeking yield farming opportunities. The domain is currently offline, though prior activity suggests it remains a high-risk threat vector for financial fraud. Infrastructure analysis reveals the domain was registered on March 28, 2026, through Gname.com Pte. Ltd., an entity frequently associated with high-risk registrations. It resolves to the IP address 172.67.166.188, a Cloudflare proxy endpoint often leveraged to obfuscate malicious infrastructure. The domain appears on two security blocklists and is flagged by 13 of 95 VirusTotal security vendors, with Google Safe Browsing categorizing it under SOCIAL_ENGINEERING. Additional threat intelligence confirms its presence in one AlienVault OTX pulse, while Gridinsoft assigns it a trust score of 0/100. The page title, 'Welcome,' is a generic placeholder, further indicating a lack of legitimate branding or operational transparency. Current status confirms the domain has been taken offline, though historical indicators suggest it may resurface under altered infrastructure or similar naming conventions. Organizations and individuals are advised to block the domain and its associated IP at the network perimeter. Users should verify liquidity pool offerings through official DeFi platform interfaces and avoid interacting with unsolicited investment opportunities. Monitoring for newly registered domains with similar naming patterns (e.g., 'liquidity-*' or 'pool-*') is recommended to preempt potential resurgence. Financial institutions should flag transactions linked to this domain for fraud review.