core-power[.]world[.]prime-fort[.]com

The domain core-power.world.prime-fort.com is a generic phishing site designed to harvest user credentials through a fraudulent login interface. It does not impersonate a specific brand or use a known crypto drainer kit. As of the latest verification, core-power.world.prime-fort.com has been taken offline, though it previously posed an elevated risk for credential theft.

Technical analysis of core-power.world.prime-fort.com shows limited detection, with 2 of 95 VirusTotal security vendors flagging it, including Gridinsoft and Webroot. The domain was registered through Cosmotown, Inc. on April 28, 2025, and resolved to the IP address 163.61.188.2, hosted on AS153568 NEW DHAKA HARDWARE in the US. It appeared on one security blocklist (PhishDestroy) and used an SSL certificate issued by Let's Encrypt (R13). The observed page title was 'Core-Power | SIGN IN', and technologies detected included Vue.js, LiteSpeed, and HTTP/3. Google Safe Browsing did not flag the domain at the time of assessment.

Users who interacted with core-power.world.prime-fort.com should immediately change any passwords entered on the site, particularly if reused across other accounts. Enabling two-factor authentication (2FA) on all critical services is strongly recommended to mitigate further risk. Monitor financial and login activity for signs of fraud, and report the phishing domain to platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to assist in broader takedown efforts.