spacepass-drake[.]com

spacepass-drake.com was registered on July 04, 2025 through MAT BAO CORPORATION. DNS resolution points to 172.67.143.138, an address owned by Cloudflare, Inc. (AS13335) located in the United States. The server presents an SSL certificate identified as WE1, but no further certificate details are available. An HTTP request returns a 403 Forbidden page title, indicating that the site is currently inaccessible; the domain is listed as taken offline.

VirusTotal records show that 10 of 95 scanning engines have flagged the domain as malicious, supporting a phishing classification. Independent blocklists PhishDestroy and ScamSniffer have already added the domain, and two additional security blocklists also contain it. Gridinsoft assigns a trust score of 0 out of 100, reflecting a high confidence of abuse. The combination of a recent registration, Cloudflare hosting, a low‑trust SSL certificate, multiple vendor detections, and blocklist listings provides a convergent set of indicators that the domain was used for a generic phishing campaign.

No payload samples, landing‑page content, or victim reports have been released, so the exact phishing vector and targeted brand remain unknown. Defenders should continue to block the domain at perimeter and DNS filtering layers, monitor for any resurgence of the host IP, and consider adding the IP address to reputation feeds. Ongoing observation of Cloudflare edge nodes and periodic re‑scans of the domain are recommended to capture any future re‑activation.