bluecorerepublic[.]world

The domain bluecorerepublic.world was registered on March 10, 2026 through OwnRegistrar, Inc. Since its inception it has been observed serving a site whose title is “Home - Blue Core Republic”. The HTTP response is a 302 redirect, and the TLS certificate is issued by Let’s Encrypt (R13). The site is presently listed on at least one security blocklist and has been blocked by PhishDestroy, confirming active malicious use.

Infrastructure analysis shows the domain resolves to the IPv4 address 198.251.84.200, which is announced by AS53667 (FranTech Solutions) and geolocated to the United States. Authoritative name servers are ns5.asurahosting.com and ns6.asurahosting.com, both typical of commercial hosting services. The hosting stack reports LiteSpeed web server, HTTP/3 support, and a front‑end built with Tailwind CSS, Alpine.js, and external widgets such as Smartsupp and jsDelivr.

Threat intelligence classifies the site as a generic phishing campaign. This assessment is corroborated by eight of ninety‑five VirusTotal scanners flagging the domain as malicious, and by a Gridinsoft trust score of 1 out of 100, indicating an extremely low reputation. The presence of a redirect, the use of a legitimate SSL certificate, and the employment of common web‑development libraries are consistent with tactics used to imitate legitimate services while evading naïve detection.

Defenders should block DNS resolution for bluecorerepublic.world and add the IP 198.251.84.200 to network‑level deny lists. Email security gateways should treat any messages containing links to this domain as malicious and quarantine them. Continuous monitoring of the associated nameservers and AS53667 for new hostnames is recommended, as the operator may spin up additional phishing sites. The low trust scores and multi‑vendor detections suggest that the domain will remain high risk while active.