xa74p-cointelegraph[.]com

The domain xa74p-cointelegraph.com has been identified as a phishing infrastructure specifically targeting cryptocurrency investors through a fraudulent initial coin offering (ICO) scheme. This domain impersonates Elon Musk and the legitimate news platform Cointelegraph to lend credibility to the scam. Analysis confirms the domain is currently offline, though it previously hosted content falsely announcing an "Elon Musk Officially Launches XA74P ICO" initiative. Infrastructure analysis reveals the domain was flagged by 2 of 95 security vendors on VirusTotal, indicating limited but confirmed malicious detection. Registered through NiceNIC International Group Co., Limited on February 23, 2026, the domain resolved to the IP address 188.114.97.3 and appeared on one security blocklist. The trust score assigned by Gridinsoft is 0 out of 100, reflecting high-risk classification. Technologies detected on the site include WordPress, MySQL, PHP, Vue.js, jQuery, Google Tag Manager, Google Analytics, and Cloudflare Browser Insights, suggesting a sophisticated frontend designed to mimic legitimate platforms. Current status confirms the domain has been taken offline, though residual risk remains for users who may have interacted with it prior to deactivation. Organizations and individuals are advised to block the domain and associated IP address at the network level. Users should verify all cryptocurrency investment opportunities through official channels only, avoiding unsolicited offers or links. Security teams are recommended to monitor for similar domains using the seed pattern "xa74p" or impersonating high-profile figures in cryptocurrency-related phishing campaigns. Historical analysis of the domain should be included in threat intelligence feeds to prevent future exploitation.