corexone[.]us

corexone.us has been flagged for hosting a crypto drainer, a type of phishing attack designed to steal cryptocurrency assets directly from victims' wallets. This threat is particularly dangerous due to the irreversible nature of crypto transactions and the sophisticated methods used to trick users into approving malicious transactions. The domain is currently active and remains under investigation as of the latest assessment. Users are strongly advised to avoid interacting with this domain to prevent financial loss. PhishDestroy identifies corexone.us as a high-risk domain based on multiple technical indicators. The domain was registered through NameCheap, Inc. on February 19, 2026, and resolves to IP address 188.114.97.3. Despite being equipped with a Let's Encrypt SSL certificate, the domain exhibits no detections on VirusTotal (5/95 engines), suggesting it has evaded immediate detection by automated scanning tools. The lack of third-party blocklist entries and low trust scores further indicate that this domain is newly emerged and potentially operating under the radar to target unsuspecting users. To mitigate the risk posed by corexone.us, PhishDestroy recommends the following actions. First, avoid accessing the domain entirely, as any interaction—such as clicking links or downloading files—could lead to wallet compromise. Second, check your wallet transaction history for any unauthorized or suspicious approvals, and revoke any unknown token permissions immediately using tools like Etherscan or similar blockchain explorers. Finally, report this domain to PhishDestroy and other threat intelligence platforms to help block its access for other users. If you have already interacted with this domain, consider transferring remaining assets to a new wallet and enable multi-factor authentication on all crypto-related accounts. Always verify URLs and use bookmarks for trusted platforms to prevent falling victim to similar attacks.