world[.]libertyfinacilal[.]com

The domain world.libertyfinacilal.com was registered on February 21, 2026 through the registrar MAT BAO CORPORATION and is currently pointed at the Cloudflare‑provided address 188.114.97.3, which resolves to a location in Canada. The infrastructure is fully cloud‑protected, using Cloudflare as both the DNS provider (adi.ns.cloudflare.com, cris.ns.cloudflare.com) and the web‑application firewall. An HTTP request to the site returns a 403 status code, and the only visible page title is "Suspected phishing site | Cloudflare", indicating that the host is being flagged by Cloudflare’s own protection mechanisms. Google Safe Browsing has classified the URL as a social‑engineering threat, and the domain appears on two external blocklists, specifically PhishDestroy and ScamSniffer.

Reputation data from Gridinsoft assigns a trust score of 0 out of 100, effectively marking the site as untrusted. VirusTotal analysis shows that 12 of 91 security engines have flagged the domain, reinforcing the suspicion of malicious intent. The combined evidence suggests a high‑confidence phishing operation, likely aimed at harvesting credentials or personal data.

Uncertainties remain around the exact payload or targeted brand, as the page content has not been publicly captured beyond the generic title. Defenders should immediately add world.libertyfinacilal.com to deny‑list rules on perimeter firewalls and proxy solutions, ensure that endpoint protection suites reference the current blocklist entries, and monitor for any inbound traffic to the associated IP address. Continuous re‑evaluation is advised, as the site status may change if the operators alter hosting or attempt to bypass existing mitigations.