woridcoin[.]co

PhishDestroy has identified woridcoin.co as a generic phishing domain with an elevated risk level. This domain was specifically crafted to deceive users seeking cryptocurrency services, likely attempting to harvest login credentials or private keys through a fake platform interface. The domain's name is a deliberate misspelling of "worldcoin," a known cryptocurrency project, indicating an impersonation attempt. Given its recent registration and offline status, it was likely taken down before causing widespread harm, but users who may have interacted with it should remain vigilant.

Analysis of technical indicators reveals concerning details: the domain was registered on February 21, 2026, which is a very recent creation date typical of malicious sites. It currently appears on three security blocklists, and only 1 out of 95 security vendors on VirusTotal flagged it as malicious, suggesting low detection coverage at the time of analysis. The site's IP address and registrar information are not publicly available in the provided data, but the domain is now offline, likely due to takedown by the hosting provider or registrar. These factors collectively point to a targeted but short-lived phishing campaign.

To protect against this specific threat, users should avoid visiting woridcoin.co or any similar misspelled domains. If any credentials were entered on this site, they should be changed immediately on the legitimate platform and two-factor authentication enabled. PhishDestroy recommends always verifying the exact URL of cryptocurrency services and using bookmarked links rather than search results or unsolicited links. For further verification, visit PhishDestroy to check if a domain is safe before interacting with it.