captchabot[.]site

The domain captchabot.site is a phishing site engaged in brand impersonation targeting Discord users. It presents itself as a legitimate verification service under the name 'Captcha.bot' but is designed to harvest login credentials through deceptive means. No crypto drainer kit was identified in this campaign. As of the latest verification, captchabot.site has been taken offline.

Technical indicators confirm the malicious nature of captchabot.site. The domain was flagged by 2 of 95 security vendors on VirusTotal, including alphaMountain.ai and CRDF, and appears on 3 security blocklists: PhishDestroy, Enkrypt, and DiscordPhishing. Registered through Tucows Domains Inc. on October 26, 2025, the domain resolves to the IP address 104.21.90.155, hosted on Cloudflare's network (AS13335). No SSL certificate was issued for the site. The observed page title was 'Captcha.bot - Verification done right,' and the domain was referenced in 2 AlienVault OTX threat intelligence pulses. Nameservers associated with the domain are aron.ns.cloudflare.com and felicity.ns.cloudflare.com.

Users who interacted with captchabot.site should immediately change their Discord passwords and enable two-factor authentication to prevent unauthorized access. Monitor accounts for signs of fraudulent activity, such as unauthorized logins or messages sent from the account. Report the phishing domain to Discord’s official support channels and consider submitting the URL to additional threat intelligence platforms like Google Safe Browsing or PhishTank to aid in broader detection efforts.