verifiy[.]capatcah[.]run

The domain verifiy.capatcah.run is currently under investigation as a credential harvesting phishing campaign, with an active status and zero vendor detections on VirusTotal. This domain mimics a verification service and has not been widely flagged despite hosting potentially malicious content. Users should treat interactions with caution and avoid submitting credentials.

This domain, verifiy.capatcah.run, resolves to IP 104.21.12.88 and utilizes a Let’s Encrypt SSL certificate. VirusTotal currently shows 0 detections out of 95 vendors, indicating it remains under the radar. The domain’s registrar, Capahost, has not been flagged for prior malicious activity, and the domain itself has no recorded blocklist entries on VirusTotal or other threat intelligence feeds. The site’s infrastructure suggests a low-profile operation, leveraging free SSL certificates and a hosting provider with minimal historical abuse reports.

Given the domain’s active status and the absence of vendor detections, organizations should flag verifiy.capatcah.run as a potential credential harvesting threat and block it at the firewall and DNS levels. Users who may have interacted with this domain should reset credentials entered and enable multi-factor authentication where possible. Security teams are advised to monitor for similar domains and report any related phishing attempts to relevant threat intelligence platforms.