MALICIOUS — CRITICAL
Verifica phishing e sicurezza per kr432451.com
kr432451[.]
This domain, kr432451.com, is identified as a generic phishing infrastructure designed to deceive users through fake Captcha verification pages.
- VirusTotal
- 12/91
- Blocklists
- No stored match
- Disponibilità
- Contenuto non disponibile · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
kr432451.com — Contenuto non disponibile (HTTP 502). Riepilogo delle prove: VirusTotal 12/91 (alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF, CyRadar); PhishDestroy score 88/100. Registrar: NiceNIC.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Evidence Analysis
This domain, kr432451.com, is identified as a generic phishing infrastructure designed to deceive users through fake Captcha verification pages. Analysis indicates no direct association with known brand impersonation or cryptocurrency drainer kits, though the use of Captcha-themed lures suggests an attempt to harvest credentials or personal data under the guise of a legitimate security check. The domain's infrastructure and rapid takedown align with typical low-sophistication phishing campaigns targeting broad audiences rather than specific organizations or financial platforms. Infrastructure analysis reveals multiple high-confidence technical indicators. The domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar frequently utilized by threat actors for short-lived malicious domains. It resolves to the IP address 104.21.26.159, which is part of a content delivery network known for masking origin servers. Security vendor detections on VirusTotal stand at 12/95, with additional listings on two security blocklists. The domain is not currently indexed by Google Safe Browsing but has been proactively blocked by multiple threat intelligence feeds. Detected technologies include Cloudflare and HTTP/3, which are commonly employed to obfuscate hosting details and evade detection. At present, kr432451.com has been taken offline, likely due to hosting provider intervention or registrar suspension. While the immediate threat is mitigated, residual risk persists for users who may have interacted with the domain prior to its deactivation. Organizations and individuals are advised to monitor for unauthorized access attempts or credential reuse stemming from this campaign. Network-level blocking of the domain and associated IP address is recommended as a precautionary measure. Given the domain's recent creation and rapid flagging, further iterations or successor domains may emerge, warranting continuous monitoring of related infrastructure patterns.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Copertura dei dati12 recorded checks
Informazioni sulla sicurezza di rete Registrar context
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-09 02:04:54 UTC
Tecnologie · 3 identified
Performance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisi di VirusTotal
Prove archiviate
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of kr432451.com · checked Jun 26, 2026
Dati e relazioni esterneIndependent lookups and source reports
PD-20260214-4DC509 Recipient: abuse@nicenic.net Victim safety and official reportingImmediate actions and verified reporting channels
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.