worldevm[.]xyz

This domain, worldevm.xyz, has been identified as a potential source of credential theft. The site previously displayed a page titled 'Nur einen Moment…', which is commonly used in phishing campaigns to mislead users and collect sensitive information such as usernames and passwords. The infrastructure was designed to deceive visitors into entering confidential data, posing an elevated security risk.

Analysis shows that worldevm.xyz was created on August 12, 2025, and registered through PDR Ltd. d/b/a PublicDomainRegistry.com. VirusTotal reports that 4 out of 95 security vendors have flagged this domain for malicious activity. The domain resolves to IP address 104.21.0.177 and has been blocked by at least one security provider. Its Gridinsoft trust score is 0/100, and it appears on a security blocklist. The domain is currently offline, reducing but not eliminating risk to users who previously accessed it.

If you visited worldevm.xyz or interacted with its content, it is recommended to change any passwords you may have entered and monitor your accounts for suspicious activity. Consider running a full security scan on your device to check for additional threats and ensure your credentials are secure.