worldlibertyledger[.]co

This domain is actively operating as a crypto drainer, a type of malicious infrastructure designed to automatically siphon cryptocurrency from connected wallets without user consent. Crypto drainers typically exploit weak or compromised wallet connections, often through deceptive prompts or hidden scripts that trigger unauthorized transactions. Victims may lose entire wallet balances in seconds, with no recourse for recovery due to the irreversible nature of blockchain transactions. The threat is particularly severe for users engaging with decentralized applications or interacting with unfamiliar smart contracts. Analysis indicates this domain was registered on November 8, 2025, through Cosmotown, Inc., a registrar frequently associated with high-risk domains. Infrastructure analysis reveals the site resolves to the IP address 148.113.207.235 and is flagged by 6 out of 95 security vendors on VirusTotal, including detection as malicious by BLP-Malware. The SSL certificate, issued by Let's Encrypt, is valid but does not mitigate the underlying threat, as legitimate certificates are commonly used to lend false credibility to fraudulent sites. The domain remains active, suggesting ongoing malicious operations. If you have visited worldlibertyledger.co or connected a wallet to this site, immediate action is required. Disconnect the wallet from all decentralized applications and revoke any active smart contract approvals using a blockchain explorer or wallet security tool. Transfer remaining assets to a new, secure wallet and monitor all connected accounts for unauthorized transactions. Report the domain to relevant security platforms and consider filing a report with local cybercrime authorities. Users should also scan their devices for malware, as crypto drainers may deploy additional payloads to maintain persistence or exfiltrate sensitive data.