# my.wertborse.com — SUSPICIOUS

> my.wertborse.com is a newly detected phishing site impersonating a cryptocurrency exchange. This domain, registered on December 29, 2025, uses a Google SSL.

## Summary
PhishDestroy identifies my.wertborse.com as a high-risk cryptocurrency exchange phishing domain hosting a wallet credential drainer kit. The domain mimics a legitimate exchange login portal to harvest private keys and seed phrases from unsuspecting victims. This malicious infrastructure is designed to empty digital wallets within minutes of credential submission, making it a critical threat to crypto investors.  This domain was flagged with a VirusTotal detection score of 0/95 engines, indicating it remains under the radar of most antivirus platforms. The site resolves to IP 104.21.49.119, registered through PDR Ltd. d/b/a PublicDomainRegistry.com on December 29, 2025. It operates with a Google Trust Services SSL certificate, suggesting an attempt to appear legitimate while remaining undetected by security software. No blocklist entries currently exist for this domain, leaving users completely exposed.  The threat remains active as of this assessment, with no takedown actions observed. Immediate browser-level blocking is recommended using the IP address 104.21.49.119 and domain my.wertborse.com. Users who may have entered credentials should immediately transfer remaining funds to a new wallet and revoke any approved smart contract permissions. The remaining risk is severe due to the drainer kit's capability to exfiltrate funds automatically upon credential submission.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-12-29 10:57:21
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- IP: 104.21.49.119

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/edb3c3f8-b055-4558-b626-0377ba931324
- PhishDestroy: https://phishdestroy.io/domain/my.wertborse.com/
- LLM endpoint: https://phishdestroy.io/domain/my.wertborse.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/my.wertborse.com/
Last updated: 2026-03-21