Is lp.world.xyz a scam?

Our automated security review marked lp.world.xyz as suspicious. Several warning signs were detected; it may still turn out legitimate, but you should verify it through independent channels before trusting it with money or credentials.

Is lp.world.xyz safe to use?

lp.world.xyz currently scores 31/100 on our trust scale. We found enough warning signals to recommend caution. Verify the site through independent channels before entering credentials or money.

Does lp.world.xyz have a valid SSL certificate?

Yes. lp.world.xyz presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 85 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.

Has lp.world.xyz been flagged by antivirus engines?

1 out of 92 antivirus engines in our malware network flagged lp.world.xyz as malicious or suspicious. Even one detection is a meaningful signal.

Is lp.world.xyz on any phishing or malware blacklists?

No. lp.world.xyz is not currently listed on the major browser blocklist feeds that modern browsers use.

Where is lp.world.xyz hosted?

lp.world.xyz resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.

How often is the lp.world.xyz report updated?

This is a permanent record of the scan run on June 27, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around lp.world.xyz have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Security Review

Is lp.world.xyz legit or a scam?

Our verdict:Suspicious· 31/100

SafeSuspiciousDangerous

A suspicious password-protected 'Liquidity Provider' portal using Worldcoin-style branding on a low-trust .xyz domain with multiple phishing flags.

Top reasons

Visual cloning of the Worldcoin (world.org) brand and logo.Password-protected interface with no public registration or context.Flagged as suspicious by Forcepoint ThreatSeeker.

lp.world.xyzScanned 53m ago

Post Facebook

Trust score

SUSPICIOUS

Heuristics 14·MT 40

Category tags

crypto fraudphishing#crypto fraud#phishing#clone site85% MT confidence

Technical red flags (1)

Visual clone of world.org

Warning signals (2)

1 of 92 engines flagged Scam-network signals (25/100)

Positive signals (3)

Not on major blacklists Encrypted connection Clean server reputation

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence

1/92

Engines flagged this URL

Domain Age

—

Registration date unknown

MT Intelligence

Suspicious

High likelihood · 85% confidence

SUSPICIOUS

Possible brand impersonation

The page visually clones world.org. The page looks styled like a known brand but may not be authentic. Check the URL carefully and navigate to the brand's real site before signing in or paying.

Website Preview

LIVE RENDER

lp.world.xyz

1Visually clones world.org 2Visual risk score 85/100

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual Screenshot Analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

/ 100

Critical visual riskVisual clone

The page visually mimics world.org

The page uses Worldcoin branding to present a fake 'Liquidity Provider Console' login, a common tactic used to harvest credentials or private keys from cryptocurrency users.

Visual risk85/100

What our vision model saw

4 signals

Use of 'World' branding and logo associated with Worldcoin

Suspiciously minimalist interface asking for a password without any context or registration options

Lack of official navigation, legal links, or company information typical of legitimate financial portals

MT Intelligence

Advanced threat intelligence

MT Security Analyst

High scam likelihoodengineMT · Guardiantrust40/100

MT AgentLive web researchVisual inspectionNetwork correlation

Confidence

The site presents a minimalist 'Unlock' screen for a 'World LP Console' without any public-facing company information or registration options. Our page analyzer detected visual cloning of the Worldcoin (world.org) brand, which is a common tactic for harvesting crypto credentials. While some social media discussions link this to a stealth Solana project, the lack of a whitepaper, official business entity, or verifiable contact details is a major red flag. Furthermore, one engine in our antivirus network and multiple external scanners have flagged the domain for phishing-related concerns. The use of a .xyz TLD and a private login for 'liquidity providers' fits the pattern of high-risk crypto infrastructure.

Full dossier

Analysis complete

Page Content

The storefront is extremely minimal, consisting only of a 'World LP Console' title and a password entry field. There are no legal links, privacy policies, or 'About Us' sections typical of a legitimate financial or decentralized finance (DeFi) platform.

Infrastructure

The site is hosted on a Cloudflare-protected IP address, which hides the true origin server. While the SSL certificate is valid, the domain uses a .xyz extension, which is frequently utilized by short-lived or high-risk crypto projects due to low registration costs.

Domain History

WHOIS data is currently unavailable, preventing us from verifying the owner or the exact age of the domain. However, our research indicates the site first appeared in security feeds around June 2024, suggesting it is a relatively new and unvetted entity.

Web Reputation

The domain has been flagged by Forcepoint ThreatSeeker as suspicious. Independent security scanners have also categorized the parent domain and its variants as phishing risks, specifically noting the impersonation of established crypto projects.

Risk Factors

Visual cloning of the Worldcoin (world.org) brand and logo.
Password-protected interface with no public registration or context.
Flagged as suspicious by Forcepoint ThreatSeeker.
Multiple external security reports classify the domain as a phishing risk.
Complete absence of business registration or verifiable contact information.
Use of a low-trust .xyz top-level domain.

Positive Signals

Valid SSL certificate issued by Google Trust Services.
Hosting IP has a clean reputation with no abuse reports.

AI Recommendation

Avoid entering any passwords or connecting your cryptocurrency wallet to this site. The lack of transparency and the use of cloned branding suggest a high risk of credential theft.

Next-gen fraud intelligence

Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for lp.world.xyz, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration

No public record found

Could not match the site to a registered company — common for small sites.

Clone check

Not a clone

No well-known site's layout or branding detected here.

Typosquat check

No look-alike match

The domain doesn't resemble any well-known brand's spelling.

Web mentions

2 scam reports

Key findings

7 headline facts from open-web research

The domain lp.world.xyz hosts a minimal page titled "World LP Console" / "World Liquidity Provider Console" featuring only the text "World", "Liquidity Provider Console", and an "Unlock" button (password-protected interface).
Multiple on-chain Solana transactions and X posts (June 2026) directly reference lp.world.xyz as the official liquidity provider console for @world_xyz, a stealth Solana project described as a prediction market ('Trade Everything') using cu
X users and threads link the console to liquidity addition for a $WORLD token via Meteora DLMM pools; some posts question if certain memecoins are official due to the private console and 90% supply retention by the project.
The parent domain world.xyz received a phishing classification from 4/91 engines on pcrisk.com scanner (trust score 67/100, first seen ~Jun 24 2026); similar worldxyz.info variants flagged as phishing impersonating world_xyz.
No official website, whitepaper, business registration, Trustpilot/ScamAdviser reviews, or verifiable company details found; project appears very early-stage/stealth with 'coming soon' messaging since ~2023.
X discussions (e.g. @0xcalibrated, @0xstickman, @Rundatmouth) treat lp.world.xyz as legitimate infrastructure for the @world_xyz project but note red flags like password protection, insider liquidity patterns, and lack of public $WORLD toke
No direct scam reports or user complaints specifically naming lp.world.xyz; related flags target similar world.xyz subdomains in a crypto/phishing context.

Scam reports (2)

Direct quotes from public scam databases, forums, and news.

pcrisk.com scanneropen
"world.xyz ... Category: Phishing ... flagged by 4 out of 91 security engines, with multiple classifications indicating phishing-related concerns"
web3antivirus.ioopen
"Crypto fraud detection ... https://worldxyz[.]info/register ... flagged as a phishing site ... Impersonated project: world_xyz"

Research summary

Narrative write-up from our AI analyst, grounded on the facts above

Our research found that the domain world.xyz and its subdomains have been flagged by multiple security scanners for phishing-related concerns. While some discussions on X (formerly Twitter) suggest this is infrastructure for a Solana-based prediction market, users have raised concerns about the project's lack of transparency and the private nature of the console. No official business registration or company filings were found in any jurisdiction.

Scam Network Intelligence

Cross-site correlation

This site shares signals with a broader cluster

Moderate correlation

Many scams don't operate alone. We correlate third-party scripts, hosting infrastructure, brand-impersonation signals, and the AI evidence package to detect when a site is part of a broader scam network.

Suspicion score

0/100

ClearLowModerateHighCritical

Evidence (2)

Short name on low-trust .xyz TLD — over-represented on scam farms.
Screenshot analysis found visual cloning of world.org.

Linked signals (2)

Pattern · LOW Trust TLDClone of world.org

Antivirus Engines

Detection matrix · live

1 engine flagged this URL

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

0Malicious1Suspicious57Harmless92Engines

of 92

Forcepoint ThreatSeeker

Suspicious· suspicious

1 antivirus engine flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found

No clear contact details on the page

Emails on site's domainNone

Phone numbersNone

Postal addressNot listed

Linked social profiles0

Signal Summary

Several contact red flags

No contact email found anywhere on the page.
No phone number listed on the page.
No postal address visible on the page.

Domain & Encryption

Encryption Certificate

StatusValid

ProtocolTLSv1.3

IssuerGoogle Trust Services · WE1

ExpiresSep 21, 2026 (85d)

Self-signedNo

Hosting & Technology

HostingCloudflare, Inc.

Server locationUS

Web servercloudflare

Redirect Chain

Hops

Cross-domain

Lookalike

Punycode

1308http://lp.world.xyz/
2200https://lp.world.xyz/

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file0

ISPCloudflare, Inc.

Usage typeContent Delivery Network

Scam-Type Likelihood

1 scam-type patterns detected

Scam-Type Likelihood

1 of 13 categories showed signals

We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.

Top match: Brand Impersonation

Brand Impersonation

Moderate likelihood

55/100

Visual clone of world.org detected in the screenshot.
AI analyst tagged this as a brand / clone-site impersonation.
Clustered with known brand-impersonation infrastructure.

Scam-Type Likelihood

1 of 13 categories showed signals

Top match: Brand Impersonation

Brand Impersonation

Moderate likelihood

55/100

Visual clone of world.org detected in the screenshot.
AI analyst tagged this as a brand / clone-site impersonation.
Clustered with known brand-impersonation infrastructure.

Possible brand impersonation

This page is styled as a known brand but is not the brand's real site.

Treat lp.world.xyz as unverified
Do not enter credentials or send money until you have independently verified the business.
Go to the brand's real site directly
Type the brand name into a search engine or open it from your bookmarks — don't use links from emails, SMS, ads, or social posts, which are the delivery vectors for impersonation.
Never download or sign in here
Even if the page "just" offers a download or a giveaway, impersonation pages frequently deliver malware or set up follow-up phishing. Assume anything accepted from this site is hostile.
Report the impersonation to the brand
Most major brands have a dedicated abuse or anti-phishing reporting channel — reporting helps them take the site down and protects other users.
Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

VirusTotal

ListedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

Our automated security review marked lp.world.xyz as suspicious. Several warning signs were detected; it may still turn out legitimate, but you should verify it through independent channels before trusting it with money or credentials.
lp.world.xyz currently scores 31/100 on our trust scale. We found enough warning signals to recommend caution. Verify the site through independent channels before entering credentials or money.
Yes. lp.world.xyz presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 85 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
1 out of 92 antivirus engines in our malware network flagged lp.world.xyz as malicious or suspicious. Even one detection is a meaningful signal.
No. lp.world.xyz is not currently listed on the major browser blocklist feeds that modern browsers use.
lp.world.xyz resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
This is a permanent record of the scan run on June 27, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around lp.world.xyz have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

Trust / 100

Final Verdict·lp.world.xyz

SUSPICIOUS

This is a suspicious login portal for a stealth cryptocurrency project that lacks transparency and business registration. It uses branding that mimics the Worldcoin ecosystem to solicit passwords from users. Do not enter any credentials or connect a wallet.

Avoid entering any passwords or connecting your cryptocurrency wallet to this site. The lack of transparency and the use of cloned branding suggest a high risk of credential theft.

AV engines

MT passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Recently scanned

Other Suspicious reports

form.ivblockchain.com

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.