wolrdlibertyfinacials[.]xyz

The domain wolrdlibertyfinacials.xyz was registered on August 19, 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the IPv6 address 2606:4700:3030::ac43:8e0a, which is hosted by Cloudflare, Inc. (AS13335) in the United States. The site presented the page title "Et øjeblik ..." before being taken offline. Reputation services have assigned a Gridinsoft trust score of 0 out of 100, indicating a lack of confidence in the host. The domain appears on a single security blocklist and has been explicitly blocked by PhishDestroy.

VirusTotal analysis recorded eight detections out of ninety‑three scanning engines, confirming that multiple vendors consider the domain malicious. The SSL certificate associated with the site is identified as "WE1," though no further validation details are available. The overall risk assessment is elevated, and the current operational status is offline.

While the available data confirms that the domain was used for a generic phishing campaign, the specific content, target brands, and phishing kit remain unverified due to the takedown. Defenders should continue to block the domain and its associated IPv6 address at network perimeters, add the domain to local threat intelligence feeds, and monitor for any re‑registration or similar infrastructure reuse. Ongoing surveillance of Cloudflare‑hosted IP ranges for related activity is advisable, as is periodic re‑query of VirusTotal and other reputation services to capture any new detections.