# thewordbar.com — SUSPICIOUS > PhishDestroy flags thewordbar.com as an active crypto drainer that slices wallets. 1/95 VirusTotal detections on this 12-day-old GoDaddy domain registered. ## Summary PhishDestroy identifies thewordbar.com as a live crypto-draining phishing site that quietly swaps wallet addresses on every transaction to steal your coins. In plain words, if you visit this page and connect your wallet to participate in any “airdrop,” “giveaway,” or “token swap,” the site automatically replaces your real wallet address with an attacker-controlled one. As soon as you approve the transaction, your tokens vanish into wallets monitored by cybercriminals. We know this site is malicious because it was created only 12 days ago (March 10, 2023), registered through GoDaddy.com, LLC, and already 1 out of 95 leading security vendors on VirusTotal has flagged it. The domain resolves to IP 216.150.1.1 and holds a Let’s Encrypt certificate—both red flags when combined with its short lifespan and the absence of any legitimate business footprint. If you have already visited thewordbar.com, disconnect your wallet immediately. Revoke any token approvals via your wallet’s settings page, do not sign any further transactions, and run a full malware scan on the device you used. Then report the domain to PhishDestroy so others can be warned and our threat intelligence can disable it faster. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) ## Domain Intelligence - Registered: 2023-03-10 00:01:10 - Registrar: GoDaddy.com, LLC - IP: 216.150.1.1 ## Detection Status - VirusTotal: 1 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/domains/thewordbar.com - PhishDestroy: https://phishdestroy.io/domain/thewordbar.com/ - LLM endpoint: https://phishdestroy.io/domain/thewordbar.com/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/thewordbar.com/ Last updated: 2026-04-07