hypecores[.]xyz

The domain hypecores.xyz is identified as a high-risk threat due to its involvement in generic phishing activities. No specific brand or drainer kit is associated with this domain, indicating a broad and potentially versatile phishing campaign.

Technical analysis of hypecores.xyz reveals a VirusTotal (VT) score of 3/95, indicating that a small number of security vendors have flagged this domain as malicious. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the IP address 104.21.86.179, which is located in California, USA, and is associated with Cloudflare, Inc. The domain was created on May 18, 2026, and it appears on 1 security blocklist. The SSL certificate is issued by Let's Encrypt, with a fingerprint E7.

The domain remains active as of the latest assessment. Given its high-risk status and the limited number of security vendors flagging it, it is crucial for organizations and individuals to exercise caution. Recommended response actions include blocking access to the domain at the network level and educating users about the signs of phishing. The remaining risk is high, as the domain could be used to target a wide range of users and potentially compromise sensitive information.