worldlibertypool[.]xyz

Analysis of the domain worldlibertypool.xyz indicates it is a confirmed crypto scam site, currently offline as of July 24, 2026. The domain was registered on February 21, 2026, and resolves to the IP address 64.29.17.1, hosted on Amazon.com, Inc. infrastructure (AS16509) in the United States. The SSL certificate is classified as R10, a low-trust indicator often associated with malicious or hastily configured sites. The page title, 'World Liberty Financial - Inspired by Trump, Powered by USD1,' explicitly ties the domain to a financial scam leveraging political branding, a common tactic in crypto-related fraud schemes. Infrastructure analysis reveals the domain is flagged by 4 of 93 security vendors on VirusTotal, a modest but notable detection rate that suggests malicious intent.

It also appears on at least one security blocklist, specifically PhishDestroy, which has classified it as a phishing threat. Gridinsoft assigns the domain a trust score of 0/100, reinforcing its high-risk status. While the domain is currently offline, its prior hosting on Amazon Web Services and the use of a politically themed page title align with known patterns of crypto scams targeting unsuspecting users with promises of high returns or exclusive financial opportunities. Defenders should treat this domain as a confirmed threat vector.

Network-level blocks should be implemented for the domain and its associated IP address (64.29.17.1) to prevent potential re-emergence or related infrastructure reuse. Security teams are advised to monitor for similar domains leveraging political or financial branding, particularly those registered within the same timeframe or hosted on cloud providers. Given the explicit mention of 'USD1' and 'Trump' in the page title, this campaign may be part of a broader trend of politically themed crypto scams. No further content analysis is available, as the site is offline and no archived captures were provided for review.