galxe[.]quest-extra[.]top

The domain galxe.quest-extra.top is an active generic phishing site that poses an elevated risk to visitors. It does not impersonate a specific brand and does not deploy a known crypto drainer kit. The site is currently live and accessible, with a page title of 'Just a moment...', which is often used as a placeholder while the site loads or redirects users to malicious content. This domain should be considered unsafe due to its association with phishing activities, as confirmed by security vendor detections.

Technical indicators for galxe.quest-extra.top include detection by 2 of 95 VirusTotal vendors, specifically Gridinsoft and Trustwave, and it appears on 1 security blocklist, PhishDestroy. The domain was registered on February 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, and resolves to IP address 172.67.205.155, which is hosted in the US by Cloudflare, Inc. (AS13335). No SSL certificate is available, and the site uses Cloudflare and HTTP/3 technologies. Google Safe Browsing has not flagged the domain, but the Gridinsoft trust score is 0 out of 100, indicating high risk.

To stay safe, users should avoid interacting with galxe.quest-extra.top and not enter any personal or financial information. If any credentials were entered, immediately change passwords for all accounts that may use the same login details and enable two-factor authentication where possible. Monitor accounts for unauthorized activity and report the phishing domain to security blocklists like PhishDestroy and to the registrar. Since no crypto drainer is involved, no token approval revocation is needed, but general caution with similar domains is advised.