popcats[.]top

PhishDestroy identifies popcats.top as a high-risk crypto drainer impersonating the Popcat Christmas Distribution giveaway. This domain was flagged by MetaMask, SEAL, and Maltrail and appears on 3 security blocklists. The site resolves to IP 188.114.96.3 and was created on January 11, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. VirusTotal reports 5 out of 95 security vendors flagged this domain as malicious.

This domain poses a severe threat as a crypto drainer, designed to trick users into connecting their cryptocurrency wallets under the false pretense of receiving free Popcat Christmas tokens or gifts. Once a user engages with the site, the drainer can silently siphon funds from connected wallets without explicit approval, leading to irreversible financial losses. The use of a legitimate-looking giveaway event, such as a Christmas distribution, is a common tactic employed by threat actors to exploit user trust and urgency during holiday seasons.

Users who visited popcats.top should immediately disconnect their wallets from the site, revoke any suspicious token approvals, and transfer remaining funds to a new wallet if necessary. It is critical to run a security scan on your device and verify the legitimacy of any crypto-related giveaways through trusted sources like PhishDestroy. If you suspect your wallet has been compromised, contact your wallet provider for further assistance and consider reporting the incident to relevant cybersecurity authorities.