# claim.usd1-worldlibertyfinancial.pro — SUSPICIOUS

> WARNING: claim.usd1-worldlibertyfinancial.pro is an active crypto drainer impersonating World Liberty Financial.

## Summary
PhishDestroy identifies claim.usd1-worldlibertyfinancial.pro as an active crypto drainer campaign under investigation. The domain lures victims with deceptive offers tied to World Liberty Financial, a legitimate financial entity, to facilitate cryptocurrency theft. Users are advised to avoid interacting with this domain until further analysis is complete.  This domain was flagged with 0/95 VirusTotal detections, indicating it currently evades common antivirus and security tools. Registered via Let's Encrypt, it resolves to IP 172.67.193.124 and operates under the seed identifier 433b8a. No blocklist entries or trust score reductions were detected at the time of investigation, suggesting this campaign is newly active and rapidly evolving to avoid detection.  Mitigation for crypto drainer threats includes avoiding unsolicited links, verifying domain authenticity via independent sources like PhishDestroy, and using hardware wallets or transaction simulation tools to detect malicious behavior. Users should report suspicious domains immediately to threat intelligence platforms and avoid entering credentials or transferring funds to unknown addresses.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 172.67.193.124

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/98331b16-057f-48a9-9cbb-71cd1cbe4699
- PhishDestroy: https://phishdestroy.io/domain/claim.usd1-worldlibertyfinancial.pro/
- LLM endpoint: https://phishdestroy.io/domain/claim.usd1-worldlibertyfinancial.pro/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/claim.usd1-worldlibertyfinancial.pro/
Last updated: 2026-03-22