antibot-captcha[.]xyz

antibot-captcha.xyz is currently under active threat intelligence investigation for hosting a crypto drainer campaign. This domain poses a high risk due to its active infrastructure designed to siphon cryptocurrency assets from unsuspecting users. The threat type is specifically identified as a crypto drainer, which operates by deceiving victims into connecting their wallets and authorizing malicious transactions under false pretenses. The domain’s recent creation date and lack of detections on reputable security platforms make it particularly dangerous for users engaging with crypto-related services. This domain was flagged with a risk level of under_investigation and is actively resolving to IP address 188.114.97.3. The domain antibot-captcha.xyz was registered through Dynadot LLC and utilizes a Let’s Encrypt SSL certificate to appear legitimate. Notably, the domain has zero detections out of 95 scans on VirusTotal, indicating it has evaded current detection mechanisms. The domain was created on March 27, 2026, which is a critical detail as it suggests a very recent and potentially opportunistic campaign. No blocklist entries or trust score data are publicly available yet, underscoring the need for immediate scrutiny. Users are strongly advised to avoid interacting with antibot-captcha.xyz or any associated links, especially those involving cryptocurrency transactions. To mitigate risks, verify the legitimacy of any captcha or security-related service by cross-referencing official sources and avoiding unsolicited prompts. If a wallet connection or transaction authorization was attempted, revoke permissions immediately via your wallet provider’s security settings. Report the domain to your cybersecurity team or relevant authorities to aid in ongoing investigations.