worldlibertyfinancial[.]it[.]com

The domain worldlibertyfinancial.it.com was identified as a generic phishing site posing an elevated risk. It did not impersonate a specific brand or deploy a known drainer kit. As of the latest verification, worldlibertyfinancial.it.com has been taken offline, reducing immediate exposure to potential victims.

Technical indicators confirm the domain's suspicious nature. Only 1 of 95 VirusTotal security vendors flagged worldlibertyfinancial.it.com, while Google Safe Browsing did not detect it. The domain appeared on 1 security blocklist (PhishDestroy) and was registered through UK Intis Telecom Ltd on October 23, 1992. It resolved to the IP address 199.59.243.228, hosted on Amazon.com, Inc.'s infrastructure (AS16509) in the US. No SSL certificate was present, and the observed page title matched the domain name. Nameservers included ns1.dyna-ns.net, ns1.it.com, ns2.dyna-ns.net, ns2.it.com, and ns3.it.com. Gridinsoft assigned a trust score of 0/100.

Individuals who interacted with worldlibertyfinancial.it.com should take immediate action to mitigate risks. Since this was a generic phishing site targeting login credentials, victims should change passwords for any accounts accessed via the domain and enable two-factor authentication where available. Monitor financial statements and credit reports for signs of fraud. Report the phishing domain to the registrar (UK Intis Telecom Ltd) and relevant authorities, such as the Anti-Phishing Working Group (APWG) or local cybercrime units. If personal data was exposed, consider placing a fraud alert on credit files.