liquidity-pool2018[.]cc

PhishDestroy has identified liquidity-pool2018.cc as a confirmed crypto phishing site, specifically designed to steal cryptocurrency wallet credentials and digital assets. This domain masquerades as a legitimate liquidity pool platform, luring users with promises of high-yield returns. Once a visitor connects their wallet and signs a malicious transaction, the site executes a smart contract drainer that transfers funds directly to the attacker's wallet. The threat is elevated because the site leverages trusted infrastructure, including an SSL certificate from Google Trust Services, to appear convincing.

Evidence from multiple intelligence sources confirms the malicious nature of this domain. VirusTotal reports that 3 out of 95 security vendors flag liquidity-pool2018.cc as malicious, indicating broad detection. The domain was registered on March 28, 2026, through Gname.com Pte. Ltd., and resolves to IP address 172.67.175.254. AlienVault OTX includes it in one threat intelligence pulse, and it appears on one security blocklist. The page title was simply "Welcome," a common tactic among phishing sites to remain generic. The domain has since been taken offline, but similar variants may emerge.

If a user has visited liquidity-pool2018.cc or connected their wallet, immediate action is critical. Users should revoke any token approvals made on the site using a revoke tool like Etherscan's Token Approval checker or Revoke.cash. They should also transfer remaining assets to a new wallet that has never interacted with the phishing domain. Additionally, users should run a full antivirus scan on their device and enable two-factor authentication on all crypto-related accounts. For ongoing protection, PhishDestroy recommends always verifying the legitimacy of any crypto platform through its verified database before connecting a wallet or entering sensitive information.