elonslots[.]com

This domain is flagged as an elevated-risk brand impersonation scam targeting Telegram users. Analysis indicates the site masquerades as an official Telegram-affiliated casino or betting platform, leveraging the brand’s reputation to deceive victims into engaging with fraudulent gambling services. The threat type aligns with social engineering tactics designed to exploit trust in the Telegram name, potentially leading to financial loss or credential compromise. Infrastructure analysis reveals the domain elonslots.com was created on September 07, 2023, and registered through PDR Ltd. d/b/a PublicDomainRegistry.com. It resolves to the IP address 104.18.6.212 and is currently offline. Security vendors on VirusTotal flagged the domain at a detection rate of 3/95, while Gridinsoft assigned a trust score of 0/100. The domain appears on one security blocklist and was previously blocked by PhishDestroy. Technical indicators include the use of Cloudflare, HSTS, Google Analytics, Facebook Pixel, and HTTP/3, alongside a Google Trust Services SSL certificate. The page title, 'Elon Casino Official Site ✅ Online ElonBet Casino ✅ Sports Betting,' reinforces the impersonation theme by falsely associating with high-profile figures and services. Mitigation steps for this threat type include blocking the domain and its resolving IP (104.18.6.212) at the network level to prevent access. Organizations should update security blocklists to include elonslots.com and monitor for related domains registered through the same registrar (PDR Ltd.). Users should be educated on recognizing brand impersonation tactics, particularly those exploiting messaging platforms like Telegram. If financial transactions or credential submissions occurred, victims should immediately revoke access to compromised accounts, reset passwords, and report the incident to relevant financial institutions or platform support teams.