meteora-lp[.]xyz

The domain meteora-lp.xyz has been identified as a generic phishing threat by PhishDestroy, posing as the Meteora LP platform — a purportedly top liquidity pool service. This domain is a fraudulent imitation designed to steal credentials or cryptocurrency from users seeking to interact with legitimate liquidity protocols. No specific drainer kit was identified, but the site's title, "Meteora LP — #1 Liquidity Pool," was crafted to lure unsuspecting investors.

Technical analysis reveals severe red flags. VirusTotal reports 6 out of 95 security vendors flagging this domain as malicious, indicating widespread detection. The domain was registered on June 01, 2026, through GMO Internet, Inc., and resolves to IP address 188.114.97.3. It appears on 3 separate security blocklists, and notably lacks an SSL certificate, exposing any visitor to data interception. These indicators collectively confirm the domain's malicious intent and high risk of credential harvesting.

As of the latest update, meteora-lp.xyz has been taken offline, neutralizing the immediate threat. However, the domain's brief active window and recent creation date suggest that threat actors may register similar domains in the future. Users who interacted with this site should immediately change passwords, enable two-factor authentication, and monitor accounts for unauthorized activity. PhishDestroy recommends remaining vigilant against Meteora-branded phishing attempts and verifying URLs before entering sensitive information.