voting-worldibertyfinancial[.]com

The domain voting-worldibertyfinancial.com, associated with banking phishing activities, is currently offline. This domain was flagged as malicious by 1 out of 95 vendors on VirusTotal and is listed on three public blocklists, including PhishDestroy, MetaMask, and SEAL. The site's takedown status suggests prompt action against its fraudulent operations.

Registered through Realtime Register B.V. and hosted on IP 188.114.96.3 in the US under Cloudflare, Inc., the domain used an SSL certificate issued by Google Trust Services. Despite its offline status, the domain's previous activity aimed to deceive users into divulging sensitive banking information, leveraging a false sense of security through its SSL certification.

PhishDestroy detected this domain on January 24, 2026, nearly a month before its creation date of February 21, 2026. This anomaly suggests potential preemptive registration or misconfiguration. The domain's rapid inclusion in blocklists highlights the effectiveness of early detection systems in combating phishing threats. Such domains often exploit the initial window between registration and widespread AV detection, emphasizing the importance of timely threat intelligence.