com-elonmusk[.]live

This domain, com-elonmusk.live, is identified as a brand impersonation phishing site targeting users of the social media platform X by falsely presenting itself as an official profile page for Elon Musk. Analysis indicates the site likely aimed to harvest login credentials or propagate fraudulent schemes under the guise of verified account activity. No crypto drainer kit signatures were detected in initial scans, but the domain’s structure and page title align with known impersonation tactics. Infrastructure analysis reveals the domain was registered on February 21, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com. It resolves to the IP address 172.67.134.125, hosted on AS13335 (Cloudflare, Inc.), and lacks an SSL certificate. Detection metrics show 9 out of 95 security vendors on VirusTotal flagged the domain as malicious. The domain appears on three security blocklists and was not listed in Google Safe Browsing at the time of assessment. The domain is currently offline, likely due to takedown actions or voluntary suspension by the registrar. Despite its inactive status, residual risk remains for users who may have interacted with the site prior to its removal. Organizations are advised to update blocklists with the domain and IP address, monitor for related infrastructure, and educate users on recognizing brand impersonation tactics. No further malicious activity has been observed from this infrastructure since takedown.