corewealthlimited[.]com

The domain corewealthlimited.com is a confirmed phishing site engaged in brand impersonation, specifically targeting Google as part of a tech-support scam. This site was designed to deceive users into believing they were interacting with a legitimate Google service, potentially leading to unauthorized access to accounts or financial fraud. As of the latest verification, corewealthlimited.com has been taken offline, but its prior activity poses residual risks to users who may have engaged with it.

Technical analysis reveals that corewealthlimited.com was flagged by 2 of 95 security vendors on VirusTotal, including alphaMountain.ai and Bfore.Ai PreCrime. The domain appears on 1 security blocklist, PhishDestroy, and was created on February 21, 2026. It resolved to the IP address 107.173.193.235, hosted on AS36352 (HostPapa) in the US, with an SSL certificate issued by R10. The observed page title was 'Home - Core wealth limited,' and Gridinsoft assigned it a trust score of 29 out of 100. No registrar information is available for this domain.

Users who interacted with corewealthlimited.com should immediately change passwords for any accounts accessed during the suspected phishing attempt, particularly Google-related services. Enable two-factor authentication (2FA) on all critical accounts to prevent unauthorized access. Monitor financial statements and credit reports for signs of fraud, and report the incident to Google’s official phishing reporting channels. Additionally, victims can file complaints with the FBI’s Internet Crime Complaint Center (IC3) or their local cybercrime authority to aid in tracking and mitigating such threats.