corechoicebank[.]online

Corechoicebank.online has been identified as a brand impersonation phishing site specifically targeting Google users. The domain is currently offline, but its recent activity posed a significant threat to anyone who may have encountered it. This site was designed to deceive visitors into believing they were interacting with a legitimate Google service, potentially leading to credential theft or other forms of fraud.

According to security intelligence, this domain was flagged by 1 out of 95 VirusTotal security vendors, indicating limited but confirmed detection. The domain was created on February 21, 2026, and resolved to IP address 163.61.188.2. It appeared on at least one security blocklist and was issued an SSL certificate from R11. The page title was "CoreChoicebank - הביתה," which is suspicious for a site impersonating Google. These technical indicators, combined with the domain's recent creation and low reputation, strongly suggest malicious intent.

As the site is now offline, the immediate risk is reduced. However, users should remain vigilant and avoid interacting with any unsolicited messages or links that direct to corechoicebank.online or similar domains. It is recommended to verify URLs carefully, especially those claiming to be from Google, and to use security tools that block known phishing sites. If any credentials were entered on this domain, they should be changed immediately, and accounts monitored for unauthorized access.