world-libartyfinancial[.]online

Analysis of world-libartyfinancial.online shows a newly registered domain (creation date February 21 2026) that has been flagged for generic phishing activity. The domain resolves to the Cloudflare edge address 104.21.47.141, located in the United States and associated with AS13335 Cloudflare, Inc. Both authoritative nameservers are Cloudflare‑provided (alice.ns.cloudflare.com and ishaan.ns.cloudflare.com), indicating the operator is leveraging Cloudflare’s CDN and protection services. The site presented a minimal HTTP response with the page title "Just a moment...", which is typical of Cloudflare’s interstitial challenge page and provides no visible malicious content for further behavioural analysis. The SSL certificate is listed as "WE1", offering no additional trust signals, and the Gridinsoft trust score is 0 out of 100, the lowest possible rating.

VirusTotal records show that five of ninety‑five scanned security vendors flagged the domain, confirming at least partial detection of malicious characteristics. The domain appears on one external blocklist and has been actively blocked by the PhishDestroy service, which has taken the site offline as of the report date. Registration was performed through PDR Ltd. d/b/a PublicDomainRegistry.com, a known bulk registrar.

While the evidence confirms the domain’s classification as a phishing vector, the lack of observed landing page content and the absence of a specific brand or credential‑capture template leave the precise attack vector undefined. Defenders should add the domain to network‑level blocklists, monitor DNS queries for the associated IP address, and continue periodic rescans to capture any future content changes. Given the recent creation date and low trust scores, the domain should be considered high‑risk until proven benign.