m-worldlibertyfinancial[.]pages[.]dev

The domain m-worldlibertyfinancial.pages.dev is a generic phishing site designed to steal user credentials through credential phishing tactics. It does not impersonate a specific brand or utilize a known drainer kit. As of the latest verification, m-worldlibertyfinancial.pages.dev has been taken offline, but it previously posed an elevated risk to visitors.

Technical indicators confirm the phishing nature of m-worldlibertyfinancial.pages.dev. The domain was flagged by 1 of 95 VirusTotal security vendors, including Ermes, and appears on 3 security blocklists: PhishDestroy, MetaMask, and SEAL. Registered through Cloudflare, Inc. on March 01, 2026, it resolved to the IP address 172.66.44.125, hosted by Cloudflare in the US (AS13335). The SSL certificate was issued by Google Trust Services / WE1, and the observed page title was 'Suspected phishing site | Cloudflare'. Technologies detected include HSTS, Cloudflare, and HTTP/3, with a Gridinsoft trust score of 0/100. The domain used nameservers jimmy.ns.cloudflare.com and samara.ns.cloudflare.com and returned an HTTP 403 status.

Users who may have interacted with m-worldlibertyfinancial.pages.dev should immediately change any compromised passwords and enable two-factor authentication (2FA) on affected accounts. Monitor accounts for unauthorized activity and report any suspected fraud to relevant financial institutions. To report the phishing domain, submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG). If credentials were entered, assume they are compromised and take proactive steps to secure accounts.