xa31k-fxempire[.]com

This domain, xa31k-fxempire.com, is actively serving a high-risk crypto scam targeting investors under the false pretense of an 'XA31K ICO' associated with Elon Musk’s AI-blockchain initiatives. The site’s page title explicitly references this fraudulent investment opportunity, leveraging Musk’s name and the FXEmpire brand to lend credibility. Registered on February 21, 2026, through NiceNIC International Group Co., Limited, the domain resolves to IP 188.114.97.3, hosted on Cloudflare’s infrastructure (AS13335) with nameservers eric.ns.cloudflare.com and vita.ns.cloudflare.com. The SSL certificate is issued by Google Trust Services (WE1), and the site employs Cloudflare protection alongside Google Tag Manager for tracking. Analysis indicates the domain is flagged by 8 of 93 security vendors, with a Gridinsoft trust score of 0/100, and appears on at least one security blocklist. The HTTP status 521 suggests server-side issues or intentional misconfiguration, a common tactic to evade automated crawlers. While the exact content of the site remains unanalyzed, the combination of a recent registration, Cloudflare obfuscation, and explicit crypto scam classification points to a deliberate phishing operation. Defenders should treat this domain as malicious, block resolution at the DNS level, and monitor for related infrastructure using the same IP or nameserver patterns. No legitimate association with Elon Musk, FXEmpire, or blockchain initiatives is confirmed.