xchangame[.]com

PhishDestroy’s ongoing investigation confirms that xchangame.com is an active crypto drainer phishing site designed to trick visitors into connecting their cryptocurrency wallets and authorize malicious transactions. The landing page mimics legitimate crypto-service interfaces, prompting users to “sign” transactions that silently drain wallet funds to attacker-controlled addresses. This behavior aligns with the fast-growing trend of “crypto drainer” phishing kits that exploit wallet-connect prompts to extract private keys or transaction approvals without requiring malware installation. This domain was flagged by PhishDestroy with 3 out of 95 VirusTotal security vendors detecting malicious content as of the latest scan. The domain was registered on March 23, 2026 through Fewmoretaps OU using the Trustname.com registrar platform. It resolves to the IP address 172.67.145.16 and uses a valid Let's Encrypt SSL certificate to enhance credibility. Despite its recent registration, the low detection rate combined with the use of a reputable SSL issuer suggests it was created to evade early detection and target crypto users during periods of high market activity. If you visited xchangame.com or connected your wallet to the site, immediately revoke any unauthorized permissions using tools like revoke.cash or your wallet’s built-in permission manager. Disconnect the wallet from your browser, clear cached data, and scan your device with updated antivirus software. Report the domain to your wallet provider, crypto exchange, and incident response platforms like PhishDestroy to help block further abuse. Stay vigilant: always verify URLs, never approve unsolicited transactions, and use hardware wallets for large holdings.