defillama-v2[.]io

Defillama-v2.io presents an elevated risk as a brand impersonation threat, specifically targeting the Across protocol. This domain attempts to deceive users by mimicking the legitimate DeFiLlama analytics platform, as evidenced by its page title "DeFiLlama - Complete DeFi Analytics Dashboard & Portfolio Tracker Platform." The site is now offline, but its past activity poses a risk to anyone who may have interacted with it.

Technical indicators paint a clear picture of malicious intent. VirusTotal flags this domain with 11 out of 95 security vendors marking it as dangerous. The domain was created on February 21, 2026, a very recent date typical of scam operations, and resolves to IP address 190.115.24.11. It appears on one security blocklist and holds an R11 SSL certificate, further undermining its legitimacy. These data points collectively confirm that defillama-v2.io was set up solely to impersonate Across and steal user funds or credentials.

Given the brand impersonation nature of this threat, users should never visit or interact with defillama-v2.io. If you have already visited the site, do not enter any personal information, wallet details, or seed phrases. Change passwords and enable two-factor authentication on any accounts that may have been compromised. Always verify domain names carefully—legitimate DeFiLlama uses defillama.com. Report any suspicious domains to security teams and warn others in the community to prevent further victimization.