com-captcha-verification[.]info

The domain com-captcha-verification.info has been identified as a high-risk generic phishing site. It does not impersonate a specific brand but is designed to deceive users into providing sensitive information, potentially leading to credential theft or further malicious activities. The domain's infrastructure and registration details suggest a sophisticated and targeted campaign.

Analysis indicates that the domain resolves to the IP address 37.77.150.152, which is located in Russia and registered to LLC Baxet. The domain was created on April 22, 2026, and is registered through Global Domain Group LLC. The SSL certificate is issued by Let's Encrypt, which can be a common tactic to increase user trust. According to VirusTotal, 15 out of 95 security vendors flag this domain as malicious. The domain is currently listed on 3 security blocklists, including PhishDestroy, MetaMask, and SEAL, indicating a known and active threat. The Google Safe Browsing (GSB) status confirms that the domain has been taken offline, but the exact timing of this action is not specified.

The current status of com-captcha-verification.info is offline, which reduces the immediate risk to users. However, the domain's prior activities and the fact that it was registered through a known registrar suggest that the threat actors may attempt to reuse the domain or similar infrastructure in future campaigns. Security professionals and users are advised to remain vigilant and avoid interacting with any related domains or IP addresses. Regular updates to security blocklists and monitoring for similar patterns of registration and IP usage can help mitigate the risk of re-emergence.