worldlbertyfinancials[.]com

Analysis of worldlbertyfinancials.com indicates an elevated‑risk phishing infrastructure that has been taken offline as of the report date, July 24 2026. The domain was registered on August 15 2025 through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to the IPv6 address 2606:4700:3030::6815:5001, which is owned by Cloudflare, Inc. (AS13335) and geo‑located in the United States. The site returns a 522 Connection timed out error, as reflected in the page title "worldlbertyfinancials.com | 522: Connection timed out," suggesting that the hosting service is no longer delivering content. Gridinsoft assigns a trust score of 0 out of 100, indicating an extremely low reputation.

VirusTotal reports that four of ninety‑three scanning engines flagged the domain, providing modest but notable detection evidence. The SSL certificate is identified only as "WE1," offering no additional validation of legitimacy. The domain appears on two security blocklists and is specifically blocked by PhishDestroy and ScamSniffer, reinforcing its classification as a phishing resource. While the available intelligence confirms the domain’s malicious intent, key details such as the exact phishing kit, targeted brand, or the content of the alleged fraudulent pages remain unknown because the site is offline and no visual or content snapshots have been captured.

Defenders should immediately block traffic to the domain at network perimeter devices, add the IPv6 address to threat‑intel feeds, and monitor for any resurrection of the domain or related domains registered by the same registrar. Continuous querying of VirusTotal and other sandbox services for re‑appearance is advised, and any outbound connections to Cloudflare‑hosted addresses that were previously associated with this domain should be inspected for potential data exfiltration.