liquity[.]cfd

The domain liquity.cfd was registered on September 22, 2025 through Web Commerce Communications Limited and is currently taken offline. Technical checks show that the domain resolves to the IP address 188.114.97.3, which belongs to the Cloudflare network (ASN13335, United States). Both authoritative name servers are Cloudflare‑managed (marek.ns.cloudflare.com and sue.ns.cloudflare.com). No SSL certificate is presented for the host, indicating that HTTPS connections are not supported.

The site’s HTML title, "Liquity V2 | Borrow on Your Own Terms," suggests a focus on the Liquity protocol, yet the intelligence tags the domain as impersonating the brand "across" and classifies the activity as brand impersonation. The domain appears on a single security blocklist and has been actively blocked by PhishDestroy. VirusTotal scans returned detections from seven out of ninety‑five security vendors, reinforcing the malicious classification. Reputation scoring is extremely low, with a Gridinsoft trust score of 0 out of 100.

While the page content has not been publicly examined, the convergence of a recent registration, Cloudflare hosting, lack of TLS, low trust rating, multiple vendor detections, and explicit brand‑impersonation labeling points to a deliberate malicious campaign aimed at deceiving users of the referenced brand. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any re‑activation attempts, and consider expanding detection rules to include the associated IP range and Cloudflare name servers. Threat intelligence feeds should be updated to reflect the domain’s status and its classification as a brand‑impersonation vector.