galxe-rewardshub[.]live

The domain galxe-rewardshub.live is a fake airdrop scam that has been taken offline. Despite being flagged by only 3 out of 95 vendors on VirusTotal, it was included in public blocklists by PhishDestroy, MetaMask, and SEAL. The site masqueraded as a legitimate platform offering cryptocurrency rewards, leveraging the popularity of airdrops to deceive users.

Registered with Global Domain Group LLC and hosted by Cloudflare, Inc., the domain was created on March 21, 2026, and detected by PhishDestroy just two days later. The swift detection highlights the effectiveness of PhishDestroy's threat intelligence pipeline, which identifies threats during the critical 24-72 hour window before antivirus databases are updated.

The page title, "Plesk Obsidian 18.0.76," suggests a misconfigured or placeholder setup, which is common in hastily assembled phishing sites. The SSL certificate was issued by Let's Encrypt, a free certificate authority often used by threat actors to lend legitimacy to their fraudulent operations. The platform risk score of 63/100 indicates a moderate threat level, emphasizing the need for awareness of such scams.

Although the domain is now offline, its brief existence underscores the ongoing challenge of combating phishing and scam domains. By exploiting the gap in detection systems, these domains can cause significant harm before being neutralized. PhishDestroy's proactive measures ensure that such threats are identified and addressed promptly, protecting users from potential losses.