spacexshipbob[.]com

Analysis indicates that the domain spacexshipbob.com was registered on August 03, 2025 through NameSilo, LLC and resolves to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc., located in the United States. The site was served without an SSL certificate and employed the Cloudflare nameservers agustin.ns.cloudflare.com and annabel.ns.cloudflare.com. The page title returned by the HTTP response was "SpacexShipbob | A world-class Elite experience," but the content has not been publicly examined.

The campaign is classified as a brand impersonation targeting Apple, and the domain appears on a single security blocklist. It was blocked by PhishDestroy, and Gridinsoft assigned a trust score of 0 out of 100, indicating a highly untrusted reputation. VirusTotal records show that the domain was scanned by 95 vendors, with none reporting a detection at the time of scanning, although this absence does not constitute proof of safety.

The domain is currently offline, limiting immediate interaction, but its infrastructure—particularly the use of Cloudflare’s network and the lack of HTTPS—remains characteristic of malicious hosting. Defenders should continue to monitor the associated IP address and Cloudflare nameservers for related activity, ensure that any inbound traffic to 188.114.97.3 is blocked or inspected, and add the domain to internal blocklists. Given the low trust score and brand impersonation classification, organizations should alert users about potential Apple‑related social engineering attempts that may reference this domain, even though the site is presently inactive.