xaiquest[.]com

Analysis of the domain xaiquest.com shows a short‑lived infrastructure that was created on February 27, 2026 and is currently offline. The authoritative nameservers eric.ns.cloudflare.com and vita.ns.cloudflare.com resolve the domain to the IP address 188.114.97.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The domain was registered through NiceNIC International Group Co., Limited, a registrar known to host both legitimate and illicit registrations. No TLS certificate was observed, indicating the site served only HTTP traffic.

The page title retrieved during the brief investigation reads “XAIQUEST Official Website Presale Get Up to 200% Bonus!”, and the threat classification is identified as Brand Impersonation. VirusTotal scans recorded nine detections out of ninety‑three security vendors, demonstrating moderate consensus among scanners that the domain is malicious. Additionally, the domain appears on a single public blocklist and is explicitly blocked by the PhishDestroy service, reinforcing its classification as a phishing vector.

While the site’s full content has not been captured, the available evidence—registration timing, Cloudflare hosting, lack of encryption, page title, and multi‑vendor detections—supports an elevated risk rating. Defenders should add 188.114.97.3 to network blocklists, enforce DNS filtering for xaiquest.com, monitor for newly registered domains using the same registrar or similar naming patterns, and ensure email security gateways are updated to block communications that reference the observed page title or associated brand‑impersonation tactics. Continuous re‑scanning of the domain after any future re‑activation is advised to capture potential changes in payload or infrastructure.