coresage[.]site

The domain coresage.site is identified as a generic phishing site. It poses a threat by potentially deceiving users into providing sensitive information. There is no specific brand or drainer kit associated with this domain. As of now, the site has been taken offline, reducing the immediate risk it poses to users. However, its previous activity indicates it was involved in phishing schemes, making it unsafe for users who might have interacted with it.

Coresage.site was detected by 2 of 95 security vendors on VirusTotal, including Gridinsoft and SOCRadar. It was registered through NameCheap, Inc., with a creation date of February 21, 2026. The domain resolved to the IP address 216.198.79.1, located in the US under Amazon.com, Inc. It appeared on three security blocklists: PhishDestroy, MetaMask, and SEAL. The SSL certificate was issued by Let's Encrypt / R13. These technical indicators suggest that the domain was actively engaged in phishing activities before being taken offline.

Users who may have interacted with coresage.site should take immediate safety steps to protect their information. If credentials were entered on the site, it is crucial to change passwords and enable two-factor authentication on affected accounts. Monitoring for unauthorized transactions or communications is advised. Reporting the phishing attempt to relevant authorities or the impersonated service can help mitigate further risks. Remaining vigilant and cautious about suspicious domains is essential in preventing phishing scams.