worldiibertyfinancials[.]com

The domain worldiibertyfinancials.com was created on August 20, 2025 and is currently offline. Infrastructure analysis shows it resolves to the Cloudflare edge address 104.21.96.1, associated with AS13335 Cloudflare, Inc., located in the United States. The site presented a TLS certificate issued by Cloudflare TLS Issuing ECC CA 1, confirming the use of Cloudflare’s SSL termination service. Registration data lists PDR Ltd. d/b/a PublicDomainRegistry.com as the registrar.

The page title observed during the brief scan was "Nur einen Moment…", indicating a possible German-language landing page, though the full content has not been captured and therefore remains unknown. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy filtering service. VirusTotal scans report that five of ninety‑three antivirus engines flagged the domain, reflecting modest detection coverage. Independent reputation scoring from Gridinsoft assigned a trust score of 0 out of 100, further suggesting malicious intent.

Defenders should add worldiibertyfinancials.com to domain blocklists at network perimeter and endpoint layers, and consider blocking its resolved IP 104.21.96.1, especially for traffic originating from Cloudflare‑served services. Continuous monitoring of DNS queries for this domain is advised, as the offline status may change. Because the exact content and phishing methodology have not been publicly disclosed, threat analysts should treat the domain as a high‑confidence malicious indicator pending deeper content analysis, and prioritize it for investigative follow‑up if any related activity is observed in logs.