muskfive[.]cc

Analysis of the domain muskfive.cc indicates a confirmed phishing campaign targeting Ethereum users through a fraudulent airdrop scheme. The domain, registered on September 23, 2025, via PDR Ltd. d/b/a PublicDomainRegistry.com, resolves to the IP address 198.251.84.200, hosted under AS53667 (FranTech Solutions) in the United States. Infrastructure analysis reveals the use of nameservers ns5.asurahosting.com, ns5.my-control-panel.com, ns6.asurahosting.com, and ns6.my-control-panel.com, which may be associated with bulletproof or low-reputation hosting providers. No SSL certificate was detected, increasing the risk of unencrypted data interception for visitors. The page title, 'Tesla Giveaway,' suggests an attempt to exploit brand recognition by falsely associating the scam with Tesla, though the primary brand target identified in available intelligence is Ethereum.

Detection data from security vendors indicates elevated risk: 10 of 95 engines on VirusTotal flagged the domain as malicious at the time of assessment. The domain appears on two security blocklists, including PhishDestroy and ScamSniffer, further corroborating its classification as a phishing threat. Gridinsoft assigned a trust score of 0/100, reinforcing its malicious designation. As of the report date (July 23, 2026), muskfive.cc is offline, though its infrastructure remains registered and could be reactivated.

Defenders should treat this domain as high-risk and prioritize blocking it at the DNS or network level. Organizations should also monitor for related domains registered through the same registrar or resolving to the same IP range, as threat actors frequently reuse infrastructure across campaigns. Given the absence of an SSL certificate and the use of low-reputation hosting, users should be cautioned against interacting with any future content hosted on this domain or its associated IPs.