worldlebirtyfinances[.]com

Analysis of worldlebirtyfinances.com shows a domain created on July 11, 2025 and currently taken offline. The domain resolves to IP address 104.21.80.1, which is owned by Cloudflare, Inc. (AS13335) and geolocated to the United States. The registration was performed through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with disposable or short‑lived abuse infrastructure. The site presents a single HTTP response with the page title "Just a moment...", a pattern typical of Cloudflare’s anti‑bot challenge page, suggesting that the underlying malicious payload is not directly exposed.

Security telemetry indicates a Gridinsoft trust score of 0 out of 100, and the domain is listed on two independent blocklists, specifically PhishDestroy and ScamSniffer, both of which categorize it as a phishing resource. VirusTotal scans report that 7 out of 93 antivirus engines flag the domain, reinforcing the suspicion of malicious intent. An SSL certificate identified as "WE1" is present, a common placeholder certificate often used by actors to obtain HTTPS quickly without validation.

While the exact phishing lure or targeted brand is not disclosed in the available data, the aggregate evidence—low trust score, multiple blocklist listings, detection by antivirus engines, and the use of a generic page title—converges on a high confidence that the domain was employed for phishing. Defenders should continue to block the domain at network perimeter devices, update URL filtering and DNS sinkhole tables, and monitor for any re‑registration attempts. Incident responders should also review any outbound connections from internal hosts to the 104.21.80.1 address during the active period and consider quarantine of compromised credentials that may have been harvested through this site.