discordcaptchasec[.]xyz
“Telegram: Join Group Chat”
discordcaptchasec.xyz — Contenuto non disponibile. Tipo di truffa: Credential Phishing. Riepilogo delle prove: VirusTotal 6 detections (engine total unavailable) (alphaMountain.ai, BitDefender, CRDF, G-Data, Gridinsoft); URLQuery 1 alert; PhishDestroy score 75/100. Registrar: Namecheap.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
PhishDestroy identifies discordcaptchasec.xyz as a confirmed credential theft site, specifically designed to harvest Discord login credentials under the guise of a CAPTCHA verification page. The site masquerades as a legitimate Discord security step, but actually captures user credentials when victims attempt to complete the fake verification. The page title observed was "Telegram: Join Group Chat," which may indicate an additional layer of social engineering or a redirect to a Telegram phishing channel.
Technical indicators paint a clear picture of malicious intent. VirusTotal flags this domain with 6 out of 95 security vendors marking it as malicious. The domain was registered on May 18, 2026, through NAMECHEAP INC, a registrar commonly abused by phishers. It resolves to IP address 188.114.97.3, which is associated with Cloudflare's infrastructure, providing the attacker with anonymity and DDoS protection. The SSL certificate is a standard Let's Encrypt (E7) certificate, which is free and easily obtained. The domain appears on one security blocklist and has been flagged by Google Safe Browsing.
The site is currently offline, likely due to takedown actions by security researchers or hosting providers. However, the risk remains elevated as similar domains can be quickly spun up. Users who may have visited this site should immediately change their Discord password and enable two-factor authentication. Avoid clicking on any unsolicited links claiming to verify your account, and always navigate directly to official platforms. PhishDestroy continues to monitor for similar threats.
Informazioni sulla sicurezza di rete
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | discordcaptchasec.xyz |
malicious | Sinkholed |
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologie · 1 identified
Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.
getbootstrap.com Confidenza al 100%Analisi di VirusTotal
Prove archiviate
Dati e relazioni esterne
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo