worldwrldcoin[.]com

This domain, worldwrldcoin.com, is a high-risk crypto drainer specifically designed to impersonate Worldcoin (WRLD), a legitimate cryptocurrency project. The site employs social engineering tactics to deceive users into connecting their digital wallets, enabling unauthorized transactions that drain funds. Infrastructure analysis reveals the domain mimics the branding and interface of the authentic Worldcoin platform, increasing the likelihood of successful credential and asset theft for unsuspecting visitors.

Evidence supporting this assessment includes detection by 14 out of 95 security vendors on VirusTotal, with the domain appearing on four independent security blocklists. Registered through GoDaddy.com, LLC on April 12, 2026, the domain resolves to the IP address 185.158.133.1 and is currently offline. Additional indicators include a Gridinsoft trust score of 0/100, a Google Safe Browsing classification of SOCIAL_ENGINEERING, and blocking by multiple security providers. The domain also employs Cloudflare and HSTS, which are often leveraged to obfuscate malicious infrastructure and enhance perceived legitimacy.

Users who have visited worldwrldcoin.com or interacted with its content should immediately disconnect any connected wallets and revoke permissions for suspicious smart contracts. It is critical to audit wallet transactions for unauthorized activity and transfer remaining assets to a new, secure wallet. Additionally, users should monitor for signs of compromised credentials or secondary phishing attempts, as attackers may reuse stolen information for further exploitation. If financial loss has occurred, report the incident to relevant authorities and consider engaging with blockchain forensics services to trace stolen assets.