decentralizedfinance[.]live

The domain decentralizedfinance.live was registered on 2026-02-21 through NiceNIC International Group Co., Limited. It resolves to the IPv4 address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The domain is currently taken offline, but historical activity shows it was listed on four public security blocklists, specifically PhishDestroy, Polkadot, Enkrypt, and Codeesura. All four blocklists flagged the domain for phishing‑related abuse, confirming its malicious intent.

In VirusTotal scans, eleven of ninety‑three security vendors returned positive detections for the domain, reinforcing the blocklist findings. The domain lacks an SSL/TLS certificate, meaning any HTTP connections would be unencrypted and easily intercepted. A Gridinsoft trust score of 0 out of 100 further indicates a complete lack of reputation. Nameserver records point to garret.ns.cloudflare.com and sofia.ns.cloudflare.com, both Cloudflare‑managed resolvers, which is consistent with the hosting infrastructure observed for the IP address.

No additional page‑title or brand information is available from the intelligence feed, so the precise phishing lure cannot be described beyond the generic classification. Defenders should continue to block the domain at perimeter and DNS layers, add the four blocklist entries to automated deny lists, and monitor for any re‑registration of the same second‑level name. Given the Cloudflare hosting, any future resurrection is likely to reuse the same CDN, so security appliances should inspect outbound traffic to the IP 188.114.97.3 for anomalous redirects or credential‑harvesting attempts. Updating URL filtering rules to include the domain and its associated IP will reduce exposure while the offline status persists.