just reevaluating it - it's probably just a worm

Flagged.

That is obviously a trojan / worm. The domain is a clear give away as well as the fake reCAPTCHA.

Why would Google expect users to open up a terminal and paste a link that runs a script on the user's machine?