# catpcha.xyz — MALICIOUS

> catpcha.xyz is a crypto drainer impersonating CAPTCHA services, flagged by 11 of 95 VirusTotal vendors. Avoid entering sensitive data—this domain is high-risk.

## Summary
PhishDestroy identifies catpcha.xyz as an active crypto drainer impersonating CAPTCHA services, currently flagged with an elevated risk level. This domain, registered on April 01, 2026, resolves to IP 104.21.3.133 and utilizes a Let's Encrypt SSL certificate for legitimacy. Registered through PDR Ltd. d/b/a PublicDomainRegistry.com, the domain is actively distributing malicious payloads.  This domain was flagged by 11 of 95 VirusTotal vendors, indicating significant malicious activity. The domain's recent registration date, combined with its association with crypto drainer tactics, suggests a targeted campaign against users seeking CAPTCHA verification services. Additionally, the domain's trust scores are critically low, further validating its malicious intent.  PhishDestroy recommends immediate avoidance of catpcha.xyz and any associated services. If you suspect interaction with this domain, scan your device for malware and revoke any unauthorized transactions. Block the domain at your network level and report the activity to relevant cybersecurity authorities. Stay vigilant—this domain is actively malicious.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-04-01 18:00:08
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- IP: 104.21.3.133

## Detection Status
- VirusTotal: 11 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/catpcha.xyz
- PhishDestroy: https://phishdestroy.io/domain/catpcha.xyz/
- LLM endpoint: https://phishdestroy.io/domain/catpcha.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/catpcha.xyz/
Last updated: 2026-04-07