worldliberty-financial-ao8[.]pages[.]dev

The domain worldliberty-financial-ao8.pages.dev is currently active and classified as a high‑risk generic phishing infrastructure. VirusTotal records indicate that 10 of 91 security vendors have flagged the domain, demonstrating a measurable level of detection across multiple scanning engines. The same domain is listed on three independent security blocklists and has been explicitly blocked by PhishDestroy, MetaMask, and SEAL, confirming its presence on reputable threat‑filtering services.

Registration data shows the domain was created on September 02, 2020 and is hosted via Cloudflare Pages, a service that provides static site hosting and CDN capabilities. DNS resolution points to the IP address 172.66.47.99, an address associated with Cloudflare’s edge network, which can obscure the true origin of the malicious host and complicate attribution efforts. No publicly available page title, SSL certificate details, or brand‑specific impersonation evidence have been disclosed, leaving the exact victim‑target profile undefined.

Defenders should prioritize adding the domain to outbound and inbound filtering rules, update DNS‑based blocklists with the observed IP, and monitor for any new indicators that may emerge from deeper page analysis. Continuous observation of VirusTotal and blocklist feeds is recommended to capture any changes in detection coverage or additional takedown actions.