liquidity-pool2018[.]com

This domain, liquidity-pool2018.com, is identified as a high-risk DeFi phishing site designed to deceive cryptocurrency users. Analysis indicates the domain mimics legitimate liquidity pool platforms, likely employing social engineering tactics to trick victims into connecting wallets or disclosing private keys. No specific brand impersonation or drainer kit signatures were confirmed, but the infrastructure aligns with known phishing campaigns targeting decentralized finance (DeFi) protocols. The site’s generic 'Welcome' page title suggests a placeholder or early-stage deployment, common in phishing operations prior to full content population. Infrastructure analysis reveals multiple technical indicators of compromise. The domain was registered through Gname.com Pte. Ltd. on March 28, 2026, an unusual future date that may indicate falsified registration details or a placeholder record. It resolves to the IP address 188.114.97.3, a host with no prior association to legitimate financial services. Google Safe Browsing flags the domain under the SOCIAL_ENGINEERING category, while VirusTotal reports 11 out of 95 security vendors detecting malicious activity. The domain appears on two security blocklists, including PhishDestroy and InversionDNS, and is referenced in one AlienVault OTX threat intelligence pulse. Gridinsoft assigns a trust score of 0/100, further corroborating its fraudulent nature. As of the latest assessment, liquidity-pool2018.com has been taken offline, likely in response to detection by security providers. However, residual risk persists due to the domain’s registration remaining active, allowing threat actors to redeploy the infrastructure. Users who interacted with the domain prior to takedown should assume potential exposure of wallet credentials or sensitive data. Recommendations include revoking any connected wallet permissions, monitoring for unauthorized transactions, and verifying future interactions with DeFi platforms through official channels only. The domain’s future reactivation remains a plausible threat, necessitating continued vigilance.