corefinoriax[.]com

corefinoriax.com entered the PhishDestroy evidence set on Feb 13, 2026. Stored content metadata identifies Across as the apparent target. The captured page title is “Core Finoriax | Official AI Crypto Trading Platform with Trusted Performance”. Content analysis also recorded brand signals for Celer, Foundation, and Gmail. The stored content classification is social media phishing. The evidence score is 85/100 (high).

Four evidence sources are positive: VirusTotal, MetaMask, SEAL, and Google Safe Browsing. VirusTotal recorded 2 detections among 95 engines: Gridinsoft, SOCRadar on Feb 23, 2026 at 07:04 UTC. MetaMask and SEAL listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 18:20 UTC. Google Safe Browsing flagged the domain: Social Engineering on Feb 25, 2026 at 20:32 UTC. Other stored checks provide context: AlienVault OTX listed 1 community pulse reference (not vendor detections) on Mar 1, 2026 at 08:31 UTC. URLQuery recorded no positive detection on Feb 14, 2026 at 00:01 UTC. URLScan completed without a malicious verdict (score 0) on Feb 13, 2026 at 15:14 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:13 UTC; content was unavailable. Registration records for the domain list REALTIME REGISTER B.V. as the registrar. At collection time, the hostname resolved to 104.21.8.95 on AS13335 (Cloudflare, Inc.). The associated network metadata labels the endpoint as AS13335 Cloudflare, Inc. in San Francisco, US. The stored server header is cloudflare. DOM analysis completed on Jul 29, 2026 at 04:09 UTC without a scored DOM indicator (0/100); the source-based findings remained positive. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery. IoC extraction completed on Aug 2, 2026 at 04:11 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators.

Taken together, the content indicators and positive source findings support classifying this hostname as Across-themed social media phishing.