worldlibertyfinancial-global[.]com[.]thetradingacadymyglobal[.]com

Analysis of the domain associated with seed ace807 indicates a generic phishing site targeting users of financial trading platforms. The domain, registered on March 11, 2026, was taken offline by July 24, 2026, following detection by multiple security vendors. The page title, 'WLF | CFD Trading — Trading on Stocks, Gold, Oil, Indices,' suggests an attempt to impersonate a trading service, though no specific brand is confirmed in available data. The site was classified as a fake exchange scam.

Infrastructure analysis reveals the domain resolved to IP 198.251.83.106, hosted on AS53667 (FranTech Solutions) in the US. The SSL certificate was issued under the R13 root, a common choice for low-cost or automated hosting environments. At the time of assessment, the domain appeared on three security blocklists and was blocked by PhishDestroy, MetaMask, and SEAL. Four of 94 security vendors on VirusTotal flagged the domain, though the specific detection rules or payloads are not publicly documented.

Defenders should treat this domain as part of a broader campaign targeting financial services. The use of a hyphenated subdomain structure (worldlibertyfinancial-global.com.thetradingacadymyglobal.com) is consistent with disposable or rapidly rotated phishing infrastructure. While the domain is offline, monitoring for re-registration or similar patterns (e.g., 'WLF' branding, CFD trading themes) is recommended. No evidence links this domain to a known phishing kit or actor group at this time.