core-power[.]world

The domain core-power.world has been identified as a phishing infrastructure designed to impersonate the legitimate Core-Power authentication portal. Analysis indicates this domain specifically targets users attempting to access Core-Power services, presenting a fraudulent login interface to harvest credentials. As of the latest assessment, the domain is classified under generic_phishing with an elevated risk level and has been taken offline. Infrastructure analysis reveals the domain was registered through Global Domain Group LLC and resolves to the IP address 163.61.188.2. Security vendor detection on VirusTotal indicates that 4 out of 95 engines flagged this domain as malicious. The domain appears on one security blocklist, and its Gridinsoft trust score is 0 out of 100, reflecting a complete lack of credibility. The site employed Vue.js and LiteSpeed technologies, alongside HTTP/3, and utilized a Let's Encrypt SSL certificate for encryption, which is commonly exploited in phishing campaigns to create a false sense of legitimacy. At present, core-power.world has been rendered inaccessible, likely due to takedown actions or infrastructure changes. Organizations and end-users are advised to treat any prior interactions with this domain as compromised. Immediate steps should include resetting credentials for accounts accessed via this portal, monitoring for unauthorized activity, and implementing multi-factor authentication where available. Network administrators should block the IP address 163.61.188.2 and the domain core-power.world at the perimeter to prevent further exposure. Users are urged to verify the authenticity of login portals by cross-referencing URLs with official sources before entering sensitive information.