xgaba.com
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCRisk.com may earn a referral commission when users sign up through this link.
Description of xgaba.com
xgaba.com appears to present itself as an online crypto casino focused on blockchain-based gambling. The page title and meta description describe it as a popular crypto casino, and the visible homepage centers on account registration, rewards, and play/withdraw functionality. The site’s branding suggests a gambling platform rather than a general information or business website.
Based on the screenshot, the homepage uses promotional language and celebrity-themed imagery, including a claim of partnership with Elon Musk. That kind of presentation may be intended to build credibility quickly, but no independent ownership or operator details are provided in the scan data. Although the page claims the service has existed since 2017, the domain itself was created only 7 days before the scan, which creates a notable inconsistency.
Safety Assessment for xgaba.com
This domain was flagged by 8 out of 92 security engines at the time of the scan, with multiple detections describing it as phishing or malicious. In addition, several web-classification sources categorized the site as phishing, fraud, or a newly registered website. Those signals are more concerning because they come from multiple independent security systems rather than a single low-confidence heuristic.
The page content also shows several risk indicators. The domain is extremely new, has no established popularity ranking, and uses a registration page that promotes a free reward while displaying a celebrity image and an apparent endorsement claim. The statement that the platform has been operating since 2017 does not align with the domain age shown in WHOIS data. That mismatch, combined with the phishing-related detections, may indicate deceptive presentation.
A malware scan also reported one suspicious JavaScript-related finding tied to an external advertising-style resource, though that signal on its own would be lower confidence than the broader multi-engine phishing detections. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was served over HTTPS with a valid Let's Encrypt certificate at the time of the scan and was behind Cloudflare infrastructure, with hosting resolved to a Cloudflare IP in Toronto, Canada. Nameservers also point to Cloudflare, which may help obscure the origin server. DNSSEC was not enabled, as the domain was reported unsigned.
From a technical risk perspective, the domain was only 7 days old at the time of review, which is a common characteristic of short-lived phishing and fraud campaigns, although not proof by itself. The scan also noted one suspicious JavaScript file and one flagged external script reference. While the TLS setup appears functional, the combination of very recent registration, phishing-related detections, and limited transparency about the operator raises technical trust concerns.
Share your experience with this website. Was it safe? Did you encounter any issues?