elonmusk[.]cc

This domain is flagged as brand impersonation with a high risk level and remains active as of the report date. VirusTotal reports detections from 13 out of 95 security vendors. AlienVault OTX lists the domain in 23 threat intelligence pulses. It appears on 2 security blocklists and is blocked specifically by PhishDestroy and BLP-Malware. The domain was registered through GoDaddy.com, LLC on January 05, 2022 and resolves to IP address 104.21.91.171. The Gridinsoft trust score stands at 37 out of 100. SSL certificate issuance is attributed to GoDaddy.com.
Analysis indicates the domain employs Node.js, Socket.io, HSTS, Google AdSense, Cloudflare and HTTP/3. These infrastructure elements align with patterns observed in active malicious hosting. The page title recorded for the domain is Elon Musk while the impersonation target is recorded as telegram. Current status confirms the domain continues to resolve without interruption.
What remains uncertain is the precise content served at the time of any given visit, as no direct page analysis beyond the recorded title and brand target is available. Registration age and detection counts provide historical context but do not confirm ongoing payload behavior. Defenders should incorporate the IP 104.21.91.171 and the domain into existing blocklists and monitoring rules. Review of traffic logs for connections to this address or name is recommended. Coordination with upstream providers listed in the registrar and certificate data can support takedown actions where applicable.