captchacore[.]com
Verifica phishing e sicurezza per captchacore.com
“Dashboard - SmartCaptcha”
captchacore.com — Ultimo attivo conosciuto (HTTP 200). Tipo di truffa: Credential Phishing. Riepilogo delle prove: VirusTotal 3/91 (CRDF, Gridinsoft, SOCRadar); PhishDestroy score 69/100. Registrar: Fewmoretaps OU d/b/a T….
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Evidence Analysis
The domain captchacore.com was registered on 28 April 2026 through Fewmoretaps OU operating as Trustname.com. The site returns HTTP 200 and presents a page titled “Dashboard – SmartCaptcha”, which is commonly used as a lure to collect user credentials under the guise of a CAPTCHA management console. Initial analysis classifies the site as a credential‑harvesting portal targeting users of popular online services.
Infrastructure analysis shows the domain resolves to IP 185.246.188.31, hosted by FlokiNET in the Netherlands. The address is served with a valid Let’s Encrypt certificate (E7) and uses the authoritative nameservers ares.trustname.com and zeus.trustname.com, both associated with the registrar’s infrastructure. Gridinsoft assigns the host a trust score of 0/100, indicating a lack of reputable activity.
The host has been added to the PhishDestroy blocklist and appears on a single additional security blocklist. AlienVault OTX references the domain in one threat‑intel pulse, confirming that external analysts have observed malicious use. VirusTotal currently reports 0 detections out of 95 engines, which reflects insufficient coverage rather than a clean bill of health.
Defenders should treat captchacore.com as a confirmed credential‑harvesting site. Network sensors ought to block outbound connections to 185.246.188.31 and DNS queries for the domain. Email gateways should flag any messages containing links or references to the domain, and incident response teams should monitor for user accounts that may have been compromised after interacting with the site. Continuous re‑evaluation is advised as additional indicators may emerge.
Copertura dei dati12 recorded checks
Informazioni sulla sicurezza di rete Registrar context
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisi di VirusTotal
Dati e relazioni esterneIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.