MALICIOUS — CRITICAL
capax.cl 网络钓鱼与安全检查
capax[.]
The domain capax.cl was registered on May 14, 2026 and remains active as of the report date.
- VirusTotal
- 3/92
- Blocklists
- 2 · MetaMask, SEAL
- 可用性
- 隐形 · 可达 · HTTP 200
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
capax.cl — 隐形 · 可达 (HTTP 200). 证据摘要: VirusTotal 3/92 (Gridinsoft); 2 external blocklist matches (MetaMask, SEAL); cloaking observed; PhishDestroy score 98/100.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
Evidence Analysis
The domain capax.cl was registered on May 14, 2026 and remains active as of the report date. Automated classification assigns it a high‑risk generic phishing label. HTTP requests to the host return a 406 status code, a pattern frequently employed to disrupt generic crawlers while presenting a tailored page to targeted victims.
Infrastructure analysis reveals that capax.cl resolves to IP address 69.6.225.73, an address located in Chile and associated with Oracle Corporation network assets. The service presents a valid TLS certificate issued by Let’s Encrypt (R13), enabling encrypted connections that may lend legitimacy to the phishing page. The domain is listed on three public blocklists and carries a Gridinsoft trust score of 0 / 100, confirming its reputation as malicious.
Threat intelligence corroborates the malicious profile. AlienVault OTX references the domain in a single pulse, and three independent blocklists have recorded it. VirusTotal scans show that three out of ninety‑five security vendors flag the domain, suggesting partial detection and highlighting the possibility of additional undetected capabilities given the recent registration date. The limited vendor count does not diminish the high‑risk rating.
Defensive recommendations include immediate DNS blocking of capax.cl and the addition of its resolved IP 69.6.225.73 to network deny lists. Monitoring outbound TLS connections for the specific Let’s Encrypt certificate fingerprint can provide early alerts of attempted access. Where possible, sinkholing the domain or redirecting traffic to a safe landing page will disrupt the phishing campaign. Continuous re‑evaluation is advised as further indicators may surface.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
数据覆盖范围12 recorded checks
威胁响应 Pipeline
公共封禁名单状态
域名情报
技术细节DNS、SSL SAN、时间戳
VirusTotal 分析
网站配置分析
证据与外部报告Independent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。