teslastockmininginvestments[.]com

Analysis of teslastockmininginvestments.com indicates a high-risk phishing domain targeting Tesla-related financial activities. The domain was registered on March 12, 2026, through TuringSign Inc. d/b/a Cosmotown, a registrar frequently associated with fraudulent infrastructure. As of July 27, 2026, the domain remains active and resolves to IP address 62.77.158.50, with nameservers ns1.serverhost.name and ns2.serverhost.name.

Detection coverage is limited but notable: the domain appears on one security blocklist (PhishDestroy) and is flagged by 2 of 91 security vendors on VirusTotal, suggesting early-stage malicious classification. Infrastructure review reveals no additional context regarding hosting provider or autonomous system, though the nameserver pattern aligns with domains previously linked to phishing campaigns. The domain's creation date, four months prior to this report, does not indicate prolonged dormancy, but the low detection count may reflect limited exposure or evasion techniques.

No HTTP status, SSL certificate details, or page content analysis is available at this time, leaving the exact phishing mechanism uncertain. Defenders should treat this domain as an active threat, particularly in environments where Tesla or investment-related communications are common. Immediate blocking at the DNS or proxy level is recommended, alongside monitoring for connections to 62.77.158.50 or related domains using the same nameserver infrastructure.