nilcore[.]xyz

The domain nilcore.xyz was identified as a generic phishing site posing an elevated risk of credential theft or fraudulent activity. It did not impersonate a specific brand or deploy a known crypto drainer kit. As of the latest verification, nilcore.xyz has been taken offline, reducing immediate exposure to users.

Technical analysis of nilcore.xyz revealed minimal detection by security vendors, with only 1 of 95 VirusTotal vendors flagging the domain. The registrar was PDR Ltd. d/b/a PublicDomainRegistry.com, and the domain was created on 2025-08-31 20:44:32. It resolved to the IP address 104.21.39.207, hosted on Cloudflare's infrastructure in the US. The domain appeared on 1 security blocklist (PhishDestroy) and had no SSL certificate, as indicated by the absence of an issuer. The observed page title was 'Nur einen Moment…', and Gridinsoft assigned a trust score of 0/100.

Users who may have interacted with nilcore.xyz should take immediate steps to secure their accounts. Change passwords for any services accessed while the site was active, enable two-factor authentication (2FA) where available, and monitor accounts for unauthorized transactions or suspicious activity. Report the phishing domain to platforms such as Google Safe Browsing, PhishTank, or local cybersecurity authorities to assist in broader mitigation efforts.