# antibot-captcha.xyz — SUSPICIOUS

> antibot-captcha.xyz hosts a crypto drainer under active investigation. Zero detections on VirusTotal (0/95) despite SSL and Dynadot registration through IP 188.

## Summary
antibot-captcha.xyz is currently under active threat intelligence investigation for hosting a crypto drainer campaign. This domain poses a high risk due to its active infrastructure designed to siphon cryptocurrency assets from unsuspecting users. The threat type is specifically identified as a crypto drainer, which operates by deceiving victims into connecting their wallets and authorizing malicious transactions under false pretenses. The domain’s recent creation date and lack of detections on reputable security platforms make it particularly dangerous for users engaging with crypto-related services.  This domain was flagged with a risk level of under_investigation and is actively resolving to IP address 188.114.97.3. The domain antibot-captcha.xyz was registered through Dynadot LLC and utilizes a Let’s Encrypt SSL certificate to appear legitimate. Notably, the domain has zero detections out of 95 scans on VirusTotal, indicating it has evaded current detection mechanisms. The domain was created on March 27, 2026, which is a critical detail as it suggests a very recent and potentially opportunistic campaign. No blocklist entries or trust score data are publicly available yet, underscoring the need for immediate scrutiny.  Users are strongly advised to avoid interacting with antibot-captcha.xyz or any associated links, especially those involving cryptocurrency transactions. To mitigate risks, verify the legitimacy of any captcha or security-related service by cross-referencing official sources and avoiding unsolicited prompts. If a wallet connection or transaction authorization was attempted, revoke permissions immediately via your wallet provider’s security settings. Report the domain to your cybersecurity team or relevant authorities to aid in ongoing investigations.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-27 21:36:33
- Registrar: Dynadot LLC
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/dd30b81a-81b8-4ad0-bd9b-0f6124f2bbd0
- PhishDestroy: https://phishdestroy.io/domain/antibot-captcha.xyz/
- LLM endpoint: https://phishdestroy.io/domain/antibot-captcha.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/antibot-captcha.xyz/
Last updated: 2026-03-28