captchabct[.]com

captchabct.com entered the PhishDestroy evidence set on Mar 27, 2026. Stored content metadata identifies Across as the apparent target. Content analysis also recorded brand signals for Facebook, Gemini, Google, LinkedIn, Scroll, TikTok, and YouTube. The stored content classification is generic phishing. The assembled evidence scores 100/100 (critical).

One independent source is positive: VirusTotal. VirusTotal recorded 15 detections among 91 engines: ADMINUSLabs, alphaMountain.ai, Bfore.Ai PreCrime, BitDefender, Chong Lua Dao, CRDF, CyRadar, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Lionic, SOCRadar, Sophos, VIPRE on Aug 1, 2026 at 02:13 UTC. The evidence is not unanimous. The external blocklist snapshot contained no matches on Aug 7, 2026 at 14:20 UTC. Google Safe Browsing returned no flag on Mar 27, 2026 at 16:52 UTC. URLScan completed without a malicious verdict (score 0). PhishStats returned no feed match on Mar 27, 2026 at 16:53 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:50 UTC; content was unavailable. Registration records for the domain list Realtime Register B.V. as the registrar and Mar 27, 2026 as the creation date. Registration preceded first observation by 0 days. At collection time, the hostname resolved to 188.114.96.3 on AS13335 (Cloudflare, Inc.). The recorded endpoint location is Toronto, CA. The stored server header is sffe. Captured page title: “captchabct.com”. DOM analysis completed on Jul 29, 2026 at 04:03 UTC; stored DOM score 48/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. IoC extraction completed on Aug 1, 2026 at 04:02 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators. TLS metadata lists Let's Encrypt as the certificate issuer.