wlfi-app[.]site

The domain wlfi-app.site has been identified as a brand impersonation threat targeting Celer, with a page title referencing World Liberty Financial (WLFI) to lure victims. This site operates as a crypto drainer, designed to steal digital assets from unsuspecting users. The threat level is elevated, and the domain has already been taken offline, but its infrastructure remains a concern.

Technical indicators paint a clear picture of malicious intent. VirusTotal flags this domain with a score of 1/95, meaning one security vendor out of 95 has marked it as malicious. The domain was registered on September 10, 2025, through HOSTINGER operations, UAB, and resolves to the IP address 212.85.28.202. It lacks an SSL certificate, which is a red flag for any legitimate financial service. Additionally, the domain appears on one security blocklist, and Google Safe Browsing has not yet listed it, but the elevated risk level warrants caution.

As of now, the site is offline, and PhishDestroy has taken appropriate response actions to mitigate the threat. However, users should remain vigilant, as similar domains may appear. It is crucial to verify any communications claiming to be from Celer or World Liberty Financial through official channels. Always double-check URLs before entering sensitive information, and use tools like PhishDestroy to stay protected against evolving phishing campaigns.