xaigen-cointelegraph[.]com

Analysis of the domain xaigen-cointelegraph.com indicates it is actively hosting a fraudulent initial coin offering (ICO) phishing scheme. The page title, 'Elon Musk Officially Launches XAIGEN ICO,' explicitly suggests an attempt to deceive visitors by leveraging the reputation of high-profile individuals and cryptocurrency platforms. The domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, and is currently resolving to the IP address 188.114.96.3, hosted on Cloudflare's infrastructure (AS13335). The site employs Cloudflare nameservers (eric.ns.cloudflare.com and vita.ns.cloudflare.com) and presents an HTTP 521 status, which may indicate server-side issues or intentional misconfiguration to evade detection.

Detection data reveals the domain is flagged by at least one security blocklist (PhishDestroy) and has been assigned a trust score of 0/100 by Gridinsoft. Two of 95 security vendors on VirusTotal have identified the domain as malicious, though the specific nature of these detections remains unverified. The SSL certificate is issued by Google Trust Services (WE1), a common provider for both legitimate and malicious sites, offering no definitive indication of intent. Technologies detected on the domain include WordPress, MySQL, PHP, Vue.js, jQuery, Google Tag Manager, and Google Analytics, suggesting a structured but not uncommon web stack for phishing operations.

Defenders should treat this domain as high-risk infrastructure. The combination of a recent registration, Cloudflare hosting, low detection counts, and an explicit fraudulent narrative in the page title aligns with known phishing tactics. Network-level blocking of the domain and its resolving IP (188.114.96.3) is recommended, alongside monitoring for related subdomains or newly registered lookalike domains.