myxaicoin[.]com

This domain, myxaicoin.com, is flagged as a generic phishing site targeting cryptocurrency investors under the guise of an official xAI token presale. Analysis indicates the page title explicitly reads 'xAI Token Official Presale,' a clear attempt to deceive users into believing they are interacting with a legitimate token sale platform. No specific drainer kit signatures have been confirmed, but the domain exhibits characteristics consistent with wallet-draining phishing campaigns, including the solicitation of cryptocurrency deposits under false pretenses. Infrastructure analysis reveals the domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 27, 2026, an atypical creation date that may indicate domain age manipulation. It resolves to the IP address 172.67.176.106, a Cloudflare-associated address often leveraged to obfuscate malicious infrastructure. The domain holds a VirusTotal detection score of 10/95, with 10 security vendors flagging it as malicious. It appears on a single security blocklist and was previously documented in one AlienVault OTX threat intelligence pulse. The SSL certificate is issued by Google Trust Services, providing a superficial layer of legitimacy while failing to mitigate the underlying threat. As of the latest assessment, myxaicoin.com has been taken offline, likely in response to detection and reporting. However, the domain remains registered, and the infrastructure could be reactivated or repurposed for future phishing operations. Users who interacted with the site are advised to revoke any connected wallet permissions, monitor for unauthorized transactions, and verify token sale legitimacy through official xAI communication channels. The elevated risk level persists due to the domain's registration status and the potential for reemergence under altered parameters.