corelio[.]cc

PhishDestroy first observed corelio.cc on Aug 23, 2026. Current evidence score: 100/100 (critical).

Positive findings are stored from 4 sources: VirusTotal, MetaMask, SEAL, and Spamhaus DBL. VirusTotal recorded 18 detections among 91 engines: alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF, CyRadar, ESET, Emsisoft, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, Lionic, Netcraft, SOCRadar, Sophos, VIPRE, Webroot on Aug 28, 2026 at 05:15 UTC. MetaMask and SEAL listed the hostname in the separate external-blocklist snapshot on Aug 28, 2026 at 02:20 UTC. Spamhaus DBL: DBL_PHISH on Aug 28, 2026 at 02:30 UTC. Non-positive and contextual checks: Gridinsoft assigned a trust score of 1/100; no observation timestamp was retained. On Aug 28, 2026 at 05:18 UTC, AlienVault OTX listed 4 community pulse references (not vendor detections); Google Safe Browsing returned no flag.

HTTP 502 server error was recorded on Aug 28, 2026 at 02:30 UTC. Latest classified outcome: registration hold observed; cause registrar client hold; mechanism client hold; observed actor NICENIC INTERNATIONAL GROUP CO., LIMITED on Aug 28, 2026 at 01:32 UTC. Registration records for the domain list NICENIC INTERNATIONAL GROUP CO., LIMITED as the registrar.

Neither a page title nor a landing-page capture is stored. The record contains 4 positive source findings supporting the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.