worldlebirtyflnancials[.]xyz

This report details a technical threat assessment for the domain worldlebirtyflnancials.xyz. The site's page title is "Just a moment...", which is commonly used by services employing browser challenge pages to verify human visitors, often as a precursor to redirecting users to a phishing or scam landing page. The domain name appears to be a typo-squatting variant impersonating a financial services brand, posing a threat of credential theft or financial fraud by deceiving visitors into entering sensitive information.

Technical analysis reveals that the domain was flagged by 8 out of 95 VirusTotal vendors, including ADMINUSLabs, ChainPatrol, alphaMountain.ai, Chong Lua Dao, and CyRadar. It is listed on 1 blocklist. The domain was created on 2026-02-21, uses SSL certificate type WE1, and resolves to IP address 104.21.48.1, which is hosted in the United States by AS13335 Cloudflare, Inc.

The site is currently offline and down, with a domain risk score of 63, indicating a high threat level. Its recent creation date and multiple vendor detections confirm it is a malicious asset, likely used for phishing or scam operations targeting financial users.