xmaxe[.]bet

The domain xmaxe.bet was a phishing site engaged in brand impersonation targeting Google. It presented itself as an official Google Chrome download page to deceive users into believing they were accessing legitimate software, posing an elevated risk of credential theft or malware distribution. No crypto drainer kit was associated with this campaign. The site is currently taken offline, but its prior activity classifies xmaxe.bet as a confirmed scam.

Technical indicators for xmaxe.bet include 1 of 95 VirusTotal security vendors flagging the domain, specifically Gridinsoft. Google Safe Browsing did not flag the site, though it appeared on 1 security blocklist, PhishDestroy. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on 2026-03-12 15:07:01 and resolved to the IP address 172.217.19.164, hosted on Google LLC's infrastructure (AS15169) in Germany. The SSL certificate was issued by E8, and the observed page title was 'Google Chrome – den schnellen und sicheren Browser von Google jetzt herunterladen.' Nameservers were graham.ns.cloudflare.com and brenna.ns.cloudflare.com.

Users who interacted with xmaxe.bet should immediately change any passwords entered on the site, particularly for Google accounts, and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor accounts for suspicious activity, such as unauthorized logins or transactions. Report the phishing domain to Google’s Safe Browsing team via their reporting tool and to the registrar, PDR Ltd., to aid in takedown efforts. If malware was downloaded, scan the device with updated antivirus software and consider resetting it to factory settings.