worldmartonline[.]com

This domain, worldmartonline.com, is identified as a generic phishing threat designed to impersonate legitimate retail checkout processes. Analysis indicates the site likely employs fraudulent transaction forms to harvest payment card details, login credentials, and personal information from victims under the guise of a trusted e-commerce platform. No specific brand impersonation or drainer kit has been conclusively linked to this domain, though its structure and content align with common phishing tactics targeting online shoppers. Infrastructure analysis reveals the following technical indicators: the domain is flagged by 13 out of 95 security vendors on VirusTotal, indicating moderate detection coverage. It was registered through GMO Internet Group, Inc. d/b/a Onamae.com and resolves to the IP address 85.120.252.36. The domain was created on June 01, 2026, suggesting a recently established malicious infrastructure. It appears on one security blocklist and is associated with a Let's Encrypt SSL certificate (R13), which is frequently abused by threat actors to lend a false sense of legitimacy. No Google Safe Browsing (GSB) status is currently available for this domain. As of the latest assessment, worldmartonline.com has been taken offline, likely in response to detection and reporting by security systems. While the immediate threat is mitigated, the domain's infrastructure remains a residual risk. Organizations and individuals are advised to block the domain and its associated IP at the network level, monitor for related indicators of compromise, and educate users on recognizing phishing attempts targeting retail platforms. Continuous vigilance is recommended, as threat actors may re-establish the domain or deploy similar infrastructure using comparable tactics.