recaptcha-metaquest[.]com

Analysis of the domain recaptcha-metaquest.com reveals a confirmed brand impersonation targeting Google, classified as a tech support scam. The domain was registered on July 30, 2025, through Tucows Domains Inc. and resolved to the IPv6 address 2606:4700:3033::ac43:ca94, hosted on Cloudflare's infrastructure (AS13335) in the United States. As of July 23, 2026, the domain is offline, though prior activity included a page titled 'Our systems have detected unusual traffic from your computer network,' a message commonly associated with Google's reCAPTCHA service, reinforcing the impersonation theme. Infrastructure checks show the domain was flagged by 15 of 95 security vendors on VirusTotal and appears on at least one security blocklist.

AlienVault OTX recorded the domain in two threat intelligence pulses, while PhishDestroy has already blocked it. The SSL certificate is issued by WE1, a provider often used in both legitimate and malicious contexts, offering no definitive signal on its own. Gridinsoft assigns a trust score of 0/100, indicating high risk.

While the exact content of the site remains unanalyzed, the combination of the page title, registration details, hosting on a bulletproof provider, and detection by multiple security vendors confirms its malicious intent. Defenders should treat this domain as a confirmed impersonation of Google's reCAPTCHA service, likely used to deceive users into engaging with tech support scams. Blocking the domain at DNS and network levels is recommended, along with monitoring for related infrastructure, such as the associated IP address and SSL certificate.