teslacoininc[.]net

Analysis of teslacoininc.net shows a newly registered domain (created 25 June 2025) that is actively serving content over HTTPS (Let’s Encrypt certificate, R12) and returning HTTP 200. The domain resolves to IP 91.222.173.30, which is assigned to AS43641 SOLLUTIUM EU Sp z.o.o. in the Netherlands. Registration was performed through the Center of Ukrainian Internet Names (UKRNAMES) and the authoritative name servers are ns1-us.v-sys.org and ns2-us.v-sys.org. The page title retrieved from the site—"Tesla Coin Inc. – Invest and Earn With Tesla Investment Inc."—indicates an attempt to impersonate the Tesla brand and promote a cryptocurrency investment scheme. The site is classified as a crypto‑scam and is flagged by three of ninety‑three VirusTotal scanners. It appears on one external blocklist and has been blocked by MetaMask, PhishDestroy and SEAL, reflecting active detection by security tools. The Gridinsoft trust score of 12 / 100 further underscores its malicious reputation. While the page title confirms brand impersonation, the underlying content has not been examined, leaving the exact phishing mechanics and any credential‑ harvesting forms unverified. Defenders should treat the domain as high‑risk: block the domain and its associated IP at network perimeters, add the IP to threat‑intel feeds, and monitor for any related indicators such as the listed name servers or the SSL certificate fingerprint. Continuous re‑scanning with sandbox tools is advised to capture any evolving payloads or malicious redirects.