v2worldlibertyfinancial[.]com[.]tr

This report details a threat site with the domain v2worldlibertyfinancial.com.tr. The site’s page title is "World Liberty Financial - Home," and it is classified as an impersonation scam specifically targeting the brand Revolut. The primary threat posed by this site is credential harvesting or financial fraud, as it attempts to deceive users into believing they are interacting with a legitimate Revolut service.

Technical analysis reveals that the domain was flagged by 17 out of 95 VirusTotal vendors. It is registered on the IP address 198.251.89.30, located in the United States and hosted by AS53667 FranTech Solutions. The site uses an SSL certificate issued by Let's Encrypt (R12) and is served by nameservers ns23.my-control-panel.com and ns24.my-control-panel.com. It appears on one blocklist and has been flagged by security vendors including ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, and CRDF.

The site is currently reported as DOWN/OFFLINE. Its GridinSoft trust rating is 0 out of 100, and its DOM risk score is 10, indicating a high risk. Based on the available data, this domain poses a significant security threat and should be avoided.