liquity[.]buzz

The domain liquity.buzz was registered on September 22, 2025 through Web Commerce Communications Limited and is currently resolved to the IP address 172.67.165.141, which belongs to AS13335 Cloudflare, Inc. in the United States. The domain is hosted on Cloudflare’s network, using the nameservers aisha.ns.cloudflare.com and sergi.ns.cloudflare.com. No TLS certificate is presented for the site, indicating that HTTPS is not configured. A trust score from Gridinsoft rates the domain at 0 out of 100, and the site has been taken offline, as indicated by its status flag.

The page title observed during the brief crawl reads "Liquity V2 | Borrow on Your Own Terms," suggesting an attempt to mimic a legitimate service. The domain appears on one security blocklist and is explicitly blocked by PhishDestroy, confirming its classification as a brand‑impersonation operation. VirusTotal analysis shows that three of ninety‑five scanning engines flagged the domain, providing additional corroboration of malicious intent.

While the exact phishing kit or credential‑harvesting mechanisms have not been disclosed, the combination of a zero trust score, lack of SSL, blocklist inclusion, and vendor detections points to a high probability of fraudulent activity targeting users of the Liquity platform. Defenders should add liquity.buzz to network‑level blocklists, monitor DNS queries for the associated Cloudflare IP, and enforce TLS inspection policies to detect any future re‑activation attempts. Continuous threat‑intel feeds should be consulted for updates, and any inbound traffic from the domain should be logged and investigated.