captcha-security[.]biz

PhishDestroy identifies captcha-security.biz as an active fake CAPTCHA phishing domain registered through PDR Ltd. d/b/a PublicDomainRegistry.com on May 06, 2026. This impostor mimics legitimate CAPTCHA services to harvest user credentials and session tokens, deploying a drainer kit hosted on IP 188.114.96.3. The domain’s SSL certificate issued by Let’s Encrypt lends false legitimacy, while its recent creation date and fraudulent branding aim to deceive users into surrendering sensitive login data. This domain was flagged by 3 of 95 VirusTotal security vendors and appears on 1 public blocklist, including the Open Information Security Database (OISD). Its technical indicators include a Let’s Encrypt SSL certificate, registration via PDR Ltd., and resolution to IP 188.114.96.3. The deceptive domain was created on May 06, 2026, and currently remains unblocked by major browsers and services despite its elevated phishing risk. As of this report, captcha-security.biz is active and poses an elevated threat. Immediate response includes blocking the domain at the network and DNS levels, revoking the SSL certificate via Let’s Encrypt, and updating browser-based phishing filters. The remaining risk remains elevated due to the domain’s recent registration and active hosting infrastructure.