worldlibertyfinancial[.]cards

PhishDestroy has identified worldlibertyfinancial.cards as a high-risk generic phishing domain that was active until recently. The site was designed to trick visitors into believing they were on a legitimate financial services page, likely to steal login credentials, personal information, or other sensitive data. The domain name mimics a well-known brand to deceive users, and the page title "Index of /" suggests a misconfigured server, though this may have been part of the deception.

Our investigation revealed that worldlibertyfinancial.cards was registered on November 15, 2025 through Spaceship, Inc., and resolved to IP address 66.29.148.134. The site used an SSL certificate from Let's Encrypt (R13), which can create a false sense of security. VirusTotal analysis shows that 16 out of 95 security vendors flagged the domain as malicious. Additionally, AlienVault OTX reported the domain in one threat intelligence pulse, and it appeared on three security blocklists before being taken offline.

If you visited or interacted with worldlibertyfinancial.cards, you should immediately change any passwords or credentials you may have entered on the site. Monitor your financial accounts for unauthorized activity and consider enabling two-factor authentication where available. Run a full security scan on your device using reputable antivirus software. If you suspect your personal information was compromised, contact your financial institutions and report the incident to local authorities or cybersecurity agencies.