world-coin-poland[.]pl

The domain world-coin-poland.pl was created on 06 April 2025 and is currently taken offline. It resolves to the IPv4 address 46.242.246.8, which is assigned to AS12824 operated by home.pl sp. z o.o. in Poland.

The authoritative name servers listed are dns.home.pl, dns2.home.pl and dns3.home.pl, and the registrar record shows registration through home.pl S.A. No TLS certificate is present, indicating that the site was served over plain HTTP when it was active. The site’s page title, captured in the intelligence feed, reads "World App — zacznij za darmo," and the campaign is classified as a brand‑impersonation attempt targeting OpenAI. Gridinsoft’s trust scoring system assigns a score of 0 out of 100, reflecting a high confidence in malicious intent. VirusTotal analysis reports that one of ninety‑five security vendors flagged the domain, and the domain appears on a single security blocklist, currently blocked by PhishDestroy.

The limited detection breadth suggests a low‑volume or short‑lived operation, yet the presence on a blocklist and the zero trust score underscore the risk. Defensive operators should add the domain and its associated IP address to deny‑list policies, monitor DNS queries for the listed name servers, and consider broader threat‑intel correlation for other assets hosted on AS12824. Continuous re‑evaluation is advised in case the domain is re‑registered or the infrastructure is repurposed for further impersonation campaigns.