wlflibfinances[.]xyz

This report analyzes the domain wlflibfinances.xyz. The site displays the page title "Nur einen Moment…", which is a German phrase meaning "Just a moment…". This is a common technique used by phishing or scam sites to present a loading screen while performing malicious activities such as credential harvesting or redirecting users to fraudulent pages. The domain poses a threat as a potential phishing or scam site, likely designed to deceive users into providing sensitive information or downloading malware.

Technical analysis reveals the domain was created on 2026-02-21. It is hosted on IP address 104.21.72.127, located in the United States, and associated with AS13335 Cloudflare, Inc. The site uses SSL certificate type WE1. VirusTotal flags the domain with 8 detections out of 95 vendors, including alerts from ChainPatrol, alphaMountain.ai, CyRadar, Forcepoint ThreatSeeker, and Fortinet. The domain appears on 2 blocklists.

The domain is currently DOWN or OFFLINE, indicating it may have been taken down or is temporarily unavailable. The DOM risk score is 70, reflecting a high-risk assessment. Based on the available data, this site represents a significant threat due to its recent creation, multiple security vendor flags, and deceptive page title, although it is not currently accessible.