Is worldlibirty-4la.pages.dev a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

The website is a free-hosted subdomain on a shared web-publishing platform. Its name closely resembles a well-known cryptocurrency-finance brand, with a transposed letter in the brand string. When analysed, the homepage did not serve ordinary content. It returned a security interstitial titled as a suspected-phishing warning, with only a very small amount of text. The apparent purpose is a brand-lookalike landing page, a pattern typically used to funnel visitors into wallet, login or onboarding flows. The page content that would show its actual business model could not be captured.

Scam/Impersonation Risk

The evidence converges on a clearly elevated risk. Multiple major security vendors independently flag the domain as malicious, and it is blacklisted by external threat-intelligence sources. The homepage was intercepted with a suspected-phishing warning rather than loading normally. The naming pattern, a misspelled variant of a recognisable crypto brand placed on a generic shared-hosting subdomain, matches the typosquat and lookalike archetype. Because the page body was not captured, no specific products, yield claims or wallet prompts can be attributed to the site, and no conflicting legal identities were observed. The brand resemblance is a naming-pattern observation, not a confirmed impersonation of a named entity. In the behavioural sandbox, the homepage generated heavy third-party network traffic, a large burst of page changes after interaction and repeated script errors. No wallet-connection prompts, clipboard tampering, hidden forms or external password forms were triggered. Those clean behavioural results do not offset the external detections, which are decisive. Evidence:

• Homepage: served a suspected-phishing interstitial, with a page title to that effect, instead of normal content.
• Domain name: a misspelled brand-style string on a shared platform subdomain, strongly resembling the platform's own domain pattern.
• Sandbox behaviour: roughly 83 external fetch/XHR requests, 5 external POSTs, 11 console errors and a DOM change of 1,508 mutations after interaction. No wallet, clipboard or hidden-form activity was detected.
• Third-party reputation: a clear majority of the evaluated security engines returned malicious or suspicious verdicts.

Regulatory Verification Notes

No licensing, registration or legal-entity information could be observed on the captured page, so nothing links the site to a regulated operator or an identifiable company. Operator and governance details are opaque. Because the page body was not captured, this is a limit of what could be assessed, not a finding about hidden content. No third-party broker or regulatory-database record matches this domain, which means there is no independent regulatory standing to rely on. The site's presentation as a finance-adjacent brand would normally warrant visible licensing and corporate-identity disclosures, and none were available. Evidence:

• Homepage: the only captured text was the interstitial warning, with no legal, about, terms or contact content.
• Hosting: served from AS13335 (Cloudflare, Inc., US) on shared platform infrastructure, which says nothing about the operator.
• Broker and regulator lookups: no matching record.

What to Verify Next

The brand being echoed should be checked through its officially published channels to confirm that this domain is not one of its properties. Any communication, advertisement or message that directed a visitor here should be traced to its source and treated as suspect. Official support and contact channels should be confirmed independently, through routes the site itself did not supply. If the site was visited with a wallet or account signed in, the exposure should be reviewed. The domain should be reported to the hosting platform and the relevant brand's security team. Evidence:

• Homepage: the suspected-phishing interstitial indicates the platform's own abuse review.
• Domain: its resemblance to a known brand name is verifiable against that brand's official domain.
• Sandbox: heavy external request activity justifies checking for unexpected wallet or account activity after any visit.

Summary Verdict

The site presents an elevated, clearly cautionary risk posture. Decisive external threat detections and a platform-level phishing warning outweigh its valid transport encryption and benign behavioural checks. Identity could not be independently connected to any real-world brand or operator. The evidence supports treating it as a probable phishing or brand-lookalike vector, not a legitimate service.

Infrastructure Integrity

The site is served from Cloudflare's network, over a valid DV TLS certificate issued by WE1 and valid to 2027-01, with all observed addresses being CDN edge IPs. The origin server was not observable. The edge protection includes a bot-challenge layer, which interrupted capture of the homepage. This infrastructure is a mitigating factor only. It confirms that the transport is encrypted and the hosting is mainstream, but it does not validate the operator, and it cannot offset the external threat detections.

Closing Assessment

Interaction beyond passive viewing should be avoided. No credentials, wallet connections, signatures, downloads or payments should be entered or approved on this domain.