# worldlibertyunlock-voting.com — SUSPICIOUS

> worldlibertyunlock-voting.com mimics World Liberty Financial in a credential theft scam. Flagged by 0 of 95 VirusTotal vendors. Do not engage or enter data.

## Summary
PhishDestroy identifies worldlibertyunlock-voting.com as an active brand impersonation domain currently under investigation for credential theft tactics targeting World Liberty Financial users. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP 188.114.97.3. Security teams have flagged the domain as suspicious due to its deceptive naming and lack of legitimate association with the impersonated brand.  This domain was flagged by 0 of 95 VirusTotal vendors as of the most recent scan and holds a valid Let's Encrypt SSL certificate. It was registered on March 24, 2026, and has not yet been listed on major domain blocklists. Trust and reputation scores remain neutral due to its recent creation and low detection count, but the absence of detections does not indicate safety. The domain’s name directly mimics the legitimate World Liberty Financial platform, increasing the risk of user deception and credential compromise.  Users and organizations are advised to block access to worldlibertyunlock-voting.com immediately and monitor for any interaction with the domain or associated IP address. Report any observed activity to your security team and consider alerting users about this impersonation campaign. Exercise heightened caution with domains resembling World Liberty Financial, especially those requesting login credentials or personal information.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-24 09:58:37
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/291670b1-f024-4693-a8f6-f41162467c38
- PhishDestroy: https://phishdestroy.io/domain/worldlibertyunlock-voting.com/
- LLM endpoint: https://phishdestroy.io/domain/worldlibertyunlock-voting.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/worldlibertyunlock-voting.com/
Last updated: 2026-03-24