Is xgalaxymetaverse.com a scam?

Our automated security review flags xgalaxymetaverse.com as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.

Is xgalaxymetaverse.com safe to use?

No — xgalaxymetaverse.com scored 19/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.

Does xgalaxymetaverse.com have a valid SSL certificate?

Yes. xgalaxymetaverse.com presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 85 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.

How old is the xgalaxymetaverse.com domain?

xgalaxymetaverse.com is 4 days old, registered on 7/3/2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.

Has xgalaxymetaverse.com been flagged by antivirus engines?

1 out of 92 antivirus engines in our malware network flagged xgalaxymetaverse.com as malicious or suspicious. Even one detection is a meaningful signal.

Is xgalaxymetaverse.com on any phishing or malware blacklists?

No. xgalaxymetaverse.com is not currently listed on the major browser blocklist feeds that modern browsers use.

Where is xgalaxymetaverse.com hosted?

xgalaxymetaverse.com resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.

How often is the xgalaxymetaverse.com report updated?

This is a permanent record of the scan run on July 7, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around xgalaxymetaverse.com have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

DANGEROUS

Crypto scam / wallet-drainer

Domain was registered only 4 days ago — brand-new sites are higher-risk by default. Signals match fake investment platforms and wallet drainers. Never connect a wallet, paste a seed phrase, or deposit crypto here.

Security Review

Is xgalaxymetaverse.com legit or a scam?

Our verdict:Dangerous· 19/100

SafeSuspiciousDangerous

Brand-new crypto airdrop site pushing wallet connections with high-pressure 'claim' language and no legitimate business footprint.

Top reasons

Domain registered only 4 days ago with no business registration records found.Page uses high-pressure airdrop language and fake video player to push wallet connections.No contact email, postal address, or verifiable business presence on the site.

xgalaxymetaverse.comScanned 11h ago

Post Facebook

Trust score

DANGEROUS

Score breakdown

Heuristics 28·MT 15

See the live page ↓

Category tags

cryptofraud#crypto drainer#airdrop drainer90% MT confidence

Technical red flags (1)

Domain is 4 days old

Warning signals (1)

1 of 92 engines flagged

Positive signals (3)

Not on major blacklistsEncrypted connectionClean server reputation

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence

1/92

Engines flagged this URL

Domain Age

4 days old

Registered Jul 3, 2026

Intelligence

Dangerous

High likelihood · 90% confidence

Website Preview

LIVE RENDER

xgalaxymetaverse.com

1Visual risk score 85/100

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

/ 100

Critical visual risk

Visual red flags detected in the screenshot

The site exhibits high-risk patterns typical of cryptocurrency drainers, including unsolicited 'claim' rewards and deceptive UI elements like fake video players.

Visual risk85/100

What our vision model saw

6 signals

Prominent 'ready to claim' messaging targeting crypto wallet users

Use of high-pressure 'airdrop' and 'allocation' language to induce urgency

Fake video player overlay designed to mimic a playable media element

Claims of 'No Gas Fees' and 'pre-qualified wallets' typical of drainer sites

Unprofessional layout with overlapping text and busy, low-quality graphics

Invented 'XRPL MAINNET - LIVE' status indicator to create a false sense of legitimacy

Intelligence

Advanced threat intelligence

Analysis

High scam likelihoodengineMT · Guardiantrust15/100

MT AgentLive web researchVisual inspection

Confidence

The domain xgalaxymetaverse.com was registered just four days ago through NICENIC with no privacy protection. The page uses urgent airdrop and allocation messaging to push users into connecting wallets, a pattern our visual analysis flags as typical of crypto drainers. No contact email, postal address, or business registration exists for the project. Our antivirus network recorded zero malicious flags but one Fortinet spam detection, while the hosting IP shows a clean abuse score. The combination of extreme domain age, deceptive UI elements, and complete absence of verifiable business records outweighs the clean engine count.

Full dossier

Analysis complete

Page Content

The site presents itself as an 'XGalaxies — XMETA & NFT Allocation Claim Portal' on the XRPL network. It displays fabricated claim statistics (42.3K claims, 184.64M XMETA distributed) and promises 'No Gas Fees' along with pre-qualified wallet eligibility. A fake video player overlay and invented 'XRPL MAINNET - LIVE' indicator create false legitimacy. The page contains no contact email, phone numbers listed are not tied to any visible business, and no postal address appears anywhere.

Infrastructure

The site loads from IP 172.67.145.83 with a clean 0/100 abuse score and zero prior reports. SSL certificate is valid from Google Trust Services and expires in 85 days. External resources include a Lovable preview subdomain and Webflow image CDN, indicating a quickly assembled landing page rather than established infrastructure. One redirect hop occurs with no cross-domain activity detected.

Domain History

Domain xgalaxymetaverse.com was registered on 2026-07-03, making it exactly 4 days old at scan time. The registrar is NICENIC INTERNATIONAL GROUP CO., LIMITED. No privacy service masks the registration, yet no matching business records appear in any jurisdiction searched. Global traffic index shows the domain is not indexed by major ranking services.

Web Reputation

Our research found zero scam reports, zero positive reviews, and zero complaints across consumer sites and forums. No business registration records exist for the domain or the XMetaversal/XGalaxies project. An associated X account @XMetaversalCTO describes the project as a 'Community Takeover,' and a token listing on xrpl.to links back to this domain, but these provide no independent verification of legitimacy.

What this means for you

Connecting a wallet to this page risks draining your funds. The combination of a brand-new domain, fabricated urgency, and missing business documentation marks this as a high-risk crypto drainer operation.

Risk Factors

Domain registered only 4 days ago with no business registration records found.
Page uses high-pressure airdrop language and fake video player to push wallet connections.
No contact email, postal address, or verifiable business presence on the site.
Visual analysis flags classic crypto drainer UI patterns including urgency messaging and overlapping graphics.

Positive Signals

Hosting IP shows zero abuse reports and clean reputation score.
SSL certificate is valid and issued by Google Trust Services.

AI Recommendation

Do not connect any wallet or enter credentials on this page. Close the tab and avoid any links from social media promoting this airdrop.

Next-gen fraud intelligence

Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for xgalaxymetaverse.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration

No public record found

Could not match the site to a registered company — common for small sites.

Clone check

Not a clone

No well-known site's layout or branding detected here.

Typosquat check

No look-alike match

The domain doesn't resemble any well-known brand's spelling.

Web mentions

No scam reports found

No complaints, no negative coverage turned up in our sweep.

Key findings

7 headline facts from open-web research

Domain xgalaxymetaverse.com registered 2026-07-03 (4 days old as of current date).
Site presents as 'XGalaxies — XMETA & NFT Allocation Claim Portal' on XRPL, promoting airdrop claims for XMETA tokens and Gen-1 XGalaxies NFTs via wallet connection.
Page claims 'No Gas Fees', sub-5s finality, eligibility for top-percentile XRPL wallets, with live claim stats (42.3K claims, 184.64M XMETA distributed).
Associated X (Twitter) account @XMetaversalCTO describes it as a 'Community Takeover (CTO)' project building XGalaxies and XPlanets on XRPL.
XGalaxyStone token listed on xrpl.to with link to the domain; price shown as 0.7 XRP.
No scam reports, reviews, complaints, or Trustpilot/ScamAdviser entries found for the exact domain or project name.
Instagram post from @galleryplay_official references the domain for 'XGalaxy NFT' claiming 'You can own a Milky way star'.

Research summary

Narrative write-up from our AI analyst, grounded on the facts above

We searched scam-report databases, consumer-review sites, and general web sources for xgalaxymetaverse.com and didn't find scam reports or complaints. For a new or low-traffic site this is expected and is not by itself a sign of trust.

Domain Timeline

Jul 3, 2026
Domain registered
First appeared in WHOIS records — 4 days old today.
Jul 7, 2026
Latest security review — Flagged as dangerous
This scan re-ran every check; the current findings are detailed above.

xgalaxymetaverse.com was registered very recently and is already flagged. Freshly-registered domains are disproportionately used for scams, and a young domain with active threat signals warrants extra caution.

Threat Detection

Antivirus Engines

Detection matrix · live

1 engine flagged this URL

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

0Malicious1Suspicious57Harmless92Engines

of 92

Fortinet

Suspicious· spam

1 antivirus engine flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

VirusTotal

ListedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Scam-Type Likelihood

1 scam-type patterns detected

Scam-Type Likelihood

1 of 13 categories showed signals

We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.

Top match: Crypto Fraud

Crypto Fraud

Moderate likelihood

45/100

AI analyst tagged this as crypto fraud / wallet-drainer.
AI analyst tagged this as an airdrop / drainer.

Scam-Type Likelihood

1 of 13 categories showed signals

Top match: Crypto Fraud

Crypto Fraud

Moderate likelihood

45/100

AI analyst tagged this as crypto fraud / wallet-drainer.
AI analyst tagged this as an airdrop / drainer.

Technical Details

domain · encryption · redirects · server reputation · referenced

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found

No clear contact details on the page

Emails on site's domainNone

Phone numbers+0152-0153

Postal addressNot listed

Linked social profiles0

Signal Summary

Several contact red flags

No contact email found anywhere on the page.
No postal address visible on the page.

Phone number listed (+0152-0153).

Domain & Encryption

Domain History

Age4 days old

RegistrarNICENIC INTERNATIONAL GROUP CO., LIMITED

RegisteredJul 3, 2026

ExpiresJul 3, 2027

Owner privacyVisible

Encryption Certificate

StatusValid

ProtocolTLSv1.3

IssuerGoogle Trust Services · WE1

ExpiresOct 1, 2026 (85d)

Self-signedNo

Hosting & Technology

HostingCloudflare, Inc.

Server locationUS

Web servercloudflare

Redirect Chain

Hops

Cross-domain

Lookalike

Punycode

1301http://xgalaxymetaverse.com/
2200https://xgalaxymetaverse.com/

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file0

ISPCloudflare, Inc.

Usage typeContent Delivery Network

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

id-preview--4b3cf96f-fe4e-4112-8c4f-e652ae031fd4.lovable.app img1.wsimg.com fonts.googleapis.com

What to do

Crypto scam / wallet-drainer indicators

The page shows patterns common to crypto-investment scams, fake airdrops, and wallet drainers.

Do not interact with xgalaxymetaverse.com
Do not enter credentials, deposit money, download files, or install browser extensions from this site.
Never paste your seed phrase anywhere
Legitimate wallets, exchanges and support staff will never ask for your 12/24-word recovery phrase. Typing it into any website — even one that looks real — gives attackers full access to your funds.
If you already connected a wallet
Revoke token approvals immediately using revoke.cash or Etherscan's Token Approvals tool. Move remaining funds to a fresh wallet (new seed phrase). Assume the original wallet is compromised.
Report the wallet and URL
File a report at IC3 (FBI Internet Crime Complaint Center) or your country's cybercrime portal. Recovery is unlikely, but reports help law enforcement map the network.
Open

Safer Alternatives

Trying to handle crypto? Use a safe option instead

Dealing with crypto? Use a regulated, well-established exchange rather than an unknown site — and never connect your wallet or enter a seed phrase on a page you can't verify.

Coinbase

Publicly-listed, regulated US exchange.

Kraken

Long-established, regulated exchange.

Gemini

Regulated US exchange & custodian.

Suggestions for safety only — not endorsements. Always verify the address bar before signing in or paying, even on well-known sites.

Final Verdict

Trust / 100

Final Verdict·xgalaxymetaverse.com

DANGEROUS

This is a fake XRPL airdrop claim site. The domain is only 4 days old, shows classic wallet-drainer patterns, and has no business registration or real contact details.

Do not connect any wallet or enter credentials on this page. Close the tab and avoid any links from social media promoting this airdrop.

AV engines

MT passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

Our automated security review flags xgalaxymetaverse.com as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.
No — xgalaxymetaverse.com scored 19/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.
Yes. xgalaxymetaverse.com presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 85 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
xgalaxymetaverse.com is 4 days old, registered on 7/3/2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
1 out of 92 antivirus engines in our malware network flagged xgalaxymetaverse.com as malicious or suspicious. Even one detection is a meaningful signal.
No. xgalaxymetaverse.com is not currently listed on the major browser blocklist feeds that modern browsers use.
xgalaxymetaverse.com resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
This is a permanent record of the scan run on July 7, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around xgalaxymetaverse.com have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Recently scanned

Other Dangerous reports

tryslimtide.systeme.io

1h ago

Read the review

Dangeroustrust1

www--santander--es.insuit.net

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.