xa71k-fxempire[.]com

Analysis of the domain xa71k-fxempire.com indicates active involvement in a cryptocurrency scam, as classified by available threat intelligence. Registered on February 21, 2026, through NiceNIC International Group Co., Limited, the domain remains operational as of July 25, 2026. Infrastructure analysis reveals resolution to IP address 104.21.60.242, hosted on Cloudflare’s network (AS13335) in the United States, with nameservers eric.ns.cloudflare.com and vita.ns.cloudflare.com. The domain presents an HTTP 521 status, suggesting server-side issues or intentional misconfiguration, while its SSL certificate is issued by Google Trust Services (WE1), a common but not inherently malicious provider. The page title, 'XA71K ICO: Elon Musk’s AI-Blockchain Vision Captures Global Investor Imagination | FXEmpire,' explicitly frames the site as an initial coin offering (ICO) promotion, leveraging the name of a high-profile individual to lend credibility.

This aligns with the scam type classification of 'Crypto Scam' in available intelligence. Detection data is limited but notable: two of ninety-three security vendors on VirusTotal flag the domain, and it appears on at least one security blocklist, specifically PhishDestroy. Gridinsoft assigns a trust score of 0/100, further indicating malicious intent. Technologies detected include Google Tag Manager, Cloudflare Browser Insights, and HTTP/3, which are consistent with modern web infrastructure but do not mitigate the domain’s fraudulent purpose. Defenders should treat this domain as high-risk.

The combination of a recent registration, Cloudflare hosting, minimal but present detection by security vendors, and an explicit crypto-themed lure warrants immediate blocking at the network and endpoint levels. While the exact content and functionality of the site remain unanalyzed, the available evidence—particularly the page title and scam classification—strongly suggests an attempt to deceive investors.