unlock-worldlibertyflnanciai[.]xyz

The domain unlock-worldlibertyflnanciai.xyz was registered on February 21, 2026 and is presently listed as offline with the page title "Sorry, the website has been stopped." Technical analysis shows the domain resolves to IP address 104.21.82.12, which belongs to Cloudflare, Inc. (ASN13335) and is geolocated in the United States. The site presents a valid SSL certificate identified as WE1, indicating that TLS termination is provided by the Cloudflare network. VirusTotal scans have recorded 15 positive detections out of 93 security vendors, suggesting that multiple independent scanners have identified malicious activity associated with the domain.

The domain is actively blocked by the PhishDestroy and ScamSniffer blocklists and appears on two additional security blocklists, reinforcing the assessment that it has been used for phishing purposes. While the current offline status limits immediate observation of malicious payloads or credential‑harvesting pages, the combination of recent registration, Cloudflare hosting, positive vendor detections, and blocklist listings provides sufficient evidence to classify the domain as a generic phishing infrastructure. Uncertainty remains regarding the specific phishing campaign details, target brands, or victim interaction patterns because no page content beyond the stop message has been captured.

Defenders should continue to enforce blocking of the domain and its associated IP address, monitor for any future resolution changes or re‑hosting on alternative IP ranges, and incorporate the domain hash into internal threat‑intel feeds. Ongoing vigilance on Cloudflare‑hosted assets, especially newly registered domains flagged by multiple vendors, is recommended to pre‑empt potential re‑activation or reuse in subsequent phishing campaigns.