worldbet[.]world

PhishDestroy identifies worldbet.world as an active crypto drainer domain engaged in credential theft and cryptocurrency wallet draining through a fraudulent sports betting portal. The domain mimics legitimate gambling platforms to trick users into connecting their crypto wallets or submitting login credentials. No specific drainer kit fingerprint (e.g., MetaDrainer, AngelDrainer) has been publicly associated with this domain yet, but behavior analysis suggests deployment of a web3 exploit kit harvesting private keys or signing malicious transactions. Worldbet.world leverages social engineering tactics including fake promotions and prize claims to increase engagement and illicit fund transfers from victim wallets.

Technical indicators confirm active threat status: the domain resolves to IP 188.114.97.3 and utilizes a Google Trust Services SSL certificate (valid chain, no revocation). Domain creation date is December 19, 2025, indicating recent registration through Global Domain Group LLC — a registrar known for bulk domain registrations that may facilitate malicious activity. VirusTotal currently shows 0 detections out of 95 engines, suggesting low signature coverage, and it remains unlisted in Google Safe Browsing (GSB) at this time. This domain is not currently blocked by major threat intelligence platforms, emphasizing the need for proactive user vigilance.

The domain is currently active and classified as under investigation with a status of 'active' in the threat database. PhishDestroy recommends immediate blocking of worldbet.world via DNS filtering or host file entries. Users are advised to avoid visiting the site, never connect wallets or input credentials, and report any interaction to their security teams. Due to the absence of detections and recent domain registration, risk remains elevated with potential for rapid escalation. Continuous monitoring and community reporting are essential to prevent wider victimization.