99captcha[.]online

This domain, 99captcha.online, is identified as a fraudulent CAPTCHA-solving service designed to deceive users into engaging with malicious infrastructure. Analysis indicates the site impersonates legitimate CAPTCHA resolution platforms, likely to distribute malware, harvest credentials, or facilitate unauthorized access to user accounts. The domain’s infrastructure and branding suggest it targets individuals seeking automated CAPTCHA bypass tools, a common vector for deploying crypto drainers or credential-stealing payloads under the guise of utility services. Evidence supporting this assessment includes detection by 6 out of 95 security vendors on VirusTotal, registration through NameCheap, Inc. on February 21, 2026, and presence on three independent security blocklists. The domain resolved to IP address 172.67.162.95, utilized a Let’s Encrypt SSL certificate, and employed LiteSpeed with HTTP/3 technologies. Additional indicators include blocking by MetaMask, SEAL, and PhishDestroy, alongside a Gridinsoft trust score of 0/100. The page title, "99Captcha - Professional CAPTCHA Solving Service," reinforces the deceptive branding intended to mimic authentic services. Users who visited 99captcha.online should immediately revoke any permissions granted to browser extensions or applications downloaded from the site. Scan the device using updated antivirus software to detect potential malware or unauthorized scripts. Reset credentials for any accounts accessed after visiting the domain, particularly those related to cryptocurrency wallets or financial services. Monitor accounts for unauthorized transactions and report the domain to relevant security teams for further investigation. Given the domain’s current offline status, users should remain vigilant for similar phishing attempts leveraging comparable branding or service offerings.