# www.coredomax.com — SUSPICIOUS

> coredomax.com hosts a fake CoreDOM phishing scam. VirusTotal shows 0/95 detections. Check the full report.

## Summary
PhishDestroy identifies coredomax.com as an active phishing domain impersonating CoreDOM to harvest user credentials. The site poses as a legitimate software distributor but redirects victims to credential-stealing forms. This is a targeted credential-harvesting operation, not generic spam.

This domain was flagged with a VirusTotal detection rate of 0/95 engines as of the latest scan, indicating zero antivirus recognition despite active phishing distribution. It resolves to IP 43.154.130.83, was registered via NameSilo, LLC on February 11, 2026, and uses a Let’s Encrypt SSL certificate for legitimacy deception. The domain shows no presence on major blocklists yet but exhibits high-risk behavior consistent with newly launched phishing campaigns.

To mitigate exposure, users should avoid visiting coredomax.com or downloading any files from it. Organizations are advised to block the domain at DNS and firewall levels and inspect outbound traffic to IP 43.154.130.83. Report the domain to your security vendor using IOCs: URL, IP, and SSL thumbprint. Enable browser warnings and user training to prevent credential submission on spoofed sites.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-02-11 12:09:34
- Registrar: NameSilo, LLC
- IP: 43.154.130.83

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/b26dfcae-1f35-4251-b49c-8868481af16a
- PhishDestroy: https://phishdestroy.io/domain/www.coredomax.com/
- LLM endpoint: https://phishdestroy.io/domain/www.coredomax.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/www.coredomax.com/
Last updated: 2026-04-12