allocation-liquity[.]xyz

PhishDestroy identifies allocation-liquity.xyz as a high-risk phishing domain impersonating the legitimate Liquity V2 protocol, a decentralized borrowing platform on Ethereum. The page title mimics the authentic service, using 'Liquity V2 | Borrow on Your Own Terms' to deceive users into believing they are accessing the official site. This domain employs a drainer kit designed to trick visitors into connecting their cryptocurrency wallets, likely to drain assets under the guise of borrowing or liquidity provision. The fraudulent nature is further evidenced by the domain’s misspelled 'liquity' in the title, a common tactic to bypass brand monitoring systems while leveraging the trusted reputation of the real Liquity protocol.

This domain exhibits multiple red flags confirmed by forensic analysis. VirusTotal flags the domain with a score of 1 out of 95 security vendors, indicating extremely low detection despite its malicious intent. Registered through PDR Ltd. d/b/a PublicDomainRegistry.com, the domain was created on April 27, 2026, suggesting it is a recently deployed threat. It resolves to IP address 172.67.167.142 and holds a valid SSL certificate issued by Let's Encrypt, which may be used to lend an air of legitimacy. Notably, the domain remains unblocked by Google Safe Browsing (GSB) and has not been flagged by major blocklists, increasing its potential reach and effectiveness in targeting unsuspecting users.

As of the latest assessment, allocation-liquity.xyz remains active and poses an ongoing threat to cryptocurrency users seeking to interact with the Liquity V2 protocol. Immediate response actions include blocking the domain at the network level, updating DNS filters, and flagging the IP and SSL certificate for takedown. Despite these efforts, the domain’s recent creation and low detection rate contribute to a high residual risk. Users are strongly advised to verify URLs through official channels and avoid interacting with this fraudulent site to prevent financial loss. PhishDestroy continues to monitor and update safety recommendations as new intelligence emerges.