wlfiwhitelistlive[.]xyz

Analysis of wlfiwhitelistlive.xyz shows that the domain was registered on 21 February 2026. The site presents the page title "World Liberty Financial - Inspired by Trump, Powered by USD1" and claims to impersonate Binance, indicating a crypto‑related fraud vector. The SSL certificate is identified only as "WE1", which suggests a self‑signed or otherwise weak certificate. Gridinsoft assigns a trust score of 0/100, confirming the lack of reputation.

VirusTotal records indicate that 12 of 93 scanning engines flagged the domain, reinforcing suspicion of malicious intent. The domain appears on two public blocklists and is actively blocked by PhishDestroy and ScamSniffer. DNS resolution points to 188.114.96.3, an address owned by Cloudflare, AS13335, located in the United States. The host’s use of a large CDN is typical for fast‑flux or evasive infrastructure, but no further hosting details are disclosed.

The site is currently listed as offline, preventing direct content inspection; therefore the exact phishing page layout, credential capture mechanisms, or malicious scripts cannot be verified at this time. Defenders should treat wlfiwhitelistlive.xyz as a confirmed Binance‑impersonation crypto scam, enforce network‑level blocking of the domain and its resolved IP, and add the associated host to local deny lists. Continuous monitoring of Cloudflare‑hosted IP ranges for re‑use of the address is advised, as the infrastructure may be repurposed for future campaigns. Threat intelligence feeds should be updated to include the domain, its trust score, and the blocklist references to improve early detection.