discord-captcha[.]cam

The domain discord-captcha.cam has been confirmed as a phishing site designed to impersonate Telegram group invitations. Analysis indicates the site specifically targets users by presenting a fraudulent "Telegram: Join Group Chat" interface, likely intended to harvest credentials or distribute malicious payloads. The domain is currently offline, but prior activity suggests it operated as a brand impersonation threat against Telegram, a widely used messaging platform. Infrastructure analysis reveals the domain was registered on April 26, 2026, through Global Domain Group LLC and resolved to the IP address 188.114.97.3. Security vendors on VirusTotal flagged the domain with 14 detections out of 95, while it appeared on one security blocklist. The site employed technologies including Bootstrap, Nginx, and HSTS, which are commonly used in both legitimate and malicious web applications. A trust score of 0/100 from Gridinsoft further corroborates its malicious classification. Current status indicates the domain has been taken offline, likely following detection and mitigation efforts. Organizations and users are advised to block the domain and its associated IP address at the network level. Security teams should review logs for connections to 188.114.97.3 or visits to discord-captcha.cam between April 26, 2026, and its takedown. End users should be educated on recognizing phishing attempts, particularly those impersonating messaging platforms, and encouraged to verify URLs before interacting with group invitations or login prompts.