discord-captcha[.]run

The domain discord-captcha.run is a generic phishing site designed to deceive users through social media-themed scams. It does not impersonate a specific brand but leverages the appearance of a Discord-related verification process to trick victims into disclosing sensitive information. As of the latest verification, discord-captcha.run has been taken offline, though its prior activity posed an elevated risk of credential theft or account compromise.

Technical indicators confirm discord-captcha.run was flagged by 1 of 95 VirusTotal security vendors, including SOCRadar, and appeared on 1 security blocklist (PhishDestroy). The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on March 23, 2026, and resolved to the IP address 172.67.215.167, hosted behind Cloudflare. The SSL certificate was issued by Let's Encrypt, and the observed page title matched the domain name. Nameservers were sunny.ns.cloudflare.com and jose.ns.cloudflare.com, and the site returned an HTTP 404 status at the time of assessment.

Users who may have interacted with discord-captcha.run should immediately change passwords for any accounts accessed during the suspected phishing attempt, enable two-factor authentication (2FA) where available, and monitor accounts for unauthorized activity. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in blocking further abuse. If financial or cryptocurrency credentials were exposed, revoke any active token approvals and consider transferring funds to a new, secure wallet.