elon-musk[.]site

Analysis of elon-musk.site, created on September 01, 2025 and hosted by Hostinger International Limited (AS47583) in Lithuania, shows a clear phishing infrastructure despite the domain being taken offline at the time of this report (July 24, 2026). The domain resolves to IP address 84.32.84.32, which is associated with a single nameserver configuration. No SSL certificate is present, leaving the site vulnerable to interception and confirming the lack of legitimate encryption. Gridinsoft assigns a trust score of 0 out of 100, indicating an extremely low reputation.

VirusTotal records a single positive detection out of 95 scanned security vendors, reinforcing the suspicion of malicious intent. Independent blocklist services PhishDestroy, ScamSniffer, and Enkrypt have all listed the domain, and it appears on three additional security blocklists, further corroborating its classification as a phishing resource. Registration details show the domain was acquired through HOSTINGER operations, UAB, a known bulk registrar often leveraged for rapid campaign deployment.

While the exact page title, targeted brand, or phishing kit used on the site remain unverified, the combination of a recent registration, low trust score, lack of TLS, and multiple blocklist entries provides sufficient evidence for defensive action. Organizations should block both the domain and its resolved IP address at perimeter defenses, monitor for any resurgence of the host, and incorporate the domain into threat‑intel feeds. Continuous re‑query of the IP and domain for new activity is recommended, as the infrastructure may be re‑used in future campaigns.