worldfinancebank[.]world

This domain, worldfinancebank.world, is actively flagged as a high-risk brand impersonation site targeting Mastercard. Analysis indicates it was registered through HETZNER-RZ-NBG-NET (ASN 24940) and currently resolves to the IP address 78.46.40.242. The page title 'World Finance Bank' aligns with financial impersonation tactics, though the exact content and functionality of the site remain unconfirmed. Security vendors have detected malicious indicators, with 15 of 95 engines on VirusTotal flagging the domain. It appears on two security blocklists—PhishDestroy and BLP-Malware—and has been referenced in 23 threat intelligence pulses on AlienVault OTX, suggesting widespread recognition as part of phishing infrastructure. The domain holds a Gridinsoft trust score of 0/100, reinforcing its classification as malicious. While the SSL certificate is issued by Let's Encrypt, this is common among both legitimate and malicious sites and does not mitigate the risk. Defenders should treat this domain as active phishing infrastructure. Recommended actions include blocking the domain and IP at network perimeter controls, monitoring for connections to 78.46.40.242, and reviewing logs for user interactions with worldfinancebank.world. Given its presence on multiple blocklists and consistent vendor detections, this domain poses a credible threat to users and organizational security.