catpchabot[.]com

Analysis of the domain catpchabot.com indicates active brand impersonation targeting Discord users. Registered on September 23, 2025, through Hosting Concepts B.V. d/b/a Registrar.eu, the domain currently resolves to IP address 172.67.162.236, hosted on Cloudflare's network (AS13335) in the United States. The site returns an HTTP 200 status, signaling an operational web page, while presenting the title 'Captcha.bot - Verification done right,' which aligns with known Discord verification scam patterns. Infrastructure checks reveal no SSL certificate, increasing the risk of unencrypted data transmission.

The domain appears on at least one security blocklist, including PhishDestroy, and is flagged in two AlienVault OTX threat intelligence pulses, suggesting prior detection by security researchers. VirusTotal reports that 7 of 95 security vendors classify this domain as malicious, though the absence of a full scan means this detection rate may not reflect all vendor assessments. Gridinsoft assigns a trust score of 0/100, further supporting its high-risk classification.

Nameservers pola.ns.cloudflare.com and rudy.ns.cloudflare.com confirm Cloudflare as the DNS provider, a common tactic to obscure hosting origins and evade takedowns. While the exact content of the site remains unanalyzed, the combination of Discord impersonation, active hosting, and detection by multiple security sources confirms its role in phishing operations. Defenders should treat this domain as malicious and block it at the network level, while users should avoid interaction to prevent credential theft or malware exposure.