voting-worldlibertyfinancial[.]com

Analysis of voting-worldlibertyfinancial.com shows a newly registered domain created on February 21, 2026 and provisioned through Realtime Register B.V. The site resolves to IP address 188.114.96.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. No TLS certificate is present, indicating the site was served over plain HTTP at the time of capture. The page title returned by the server is "Even geduld...", a phrase that provides no direct indication of the intended victim audience or lure. Gridinsoft assigns a trust score of 0 out of 100, reflecting an extremely low reputation.

The domain appears on three security blocklists and has been explicitly blocked by PhishDestroy, MetaMask, and SEAL, reinforcing its classification as a malicious resource. VirusTotal scans returned detections from eleven of ninety‑five security vendors, and AlienVault OTX references the domain in one threat‑intel pulse, confirming that multiple independent sources have flagged it as a banking phishing instrument. Nameserver records point to elaine.ns.cloudflare.com and nico.ns.cloudflare.com, consistent with the Cloudflare hosting infrastructure.

The current operational status is offline, so active phishing content cannot be observed, and the exact payload or credential‑harvesting mechanisms remain unknown. Defenders should continue to block the domain at network perimeter, add the IP and associated nameservers to deny‑list rules, and monitor for any re‑registration attempts or resurrection of the site. Continuous threat‑intel feeds should be consulted for new indicators, and any observed traffic to the IP or domain should be treated as suspicious and logged for further investigation.