spaceshooter[.]net

This domain, spaceshooter.net, is flagged as a high-risk phishing site targeting cryptocurrency users. Registered on February 21, 2026, through NameCheap, Inc., the domain presents itself as a crypto earning and advertising platform under the page title 'SpaceShooter - Best Crypto Earning and Advertising Platform.' Infrastructure analysis reveals Cloudflare-hosted nameservers (mckinley.ns.cloudflare.com and santino.ns.cloudflare.com) and resolves to the IP address 172.67.128.126, associated with AS13335 Cloudflare, Inc. in the United States. The site maintains an active SSL certificate issued by Google Trust Services, and its HTTP status remains 200, indicating the page is currently accessible. The domain appears on one security blocklist, PhishDestroy, and is detected by 6 out of 95 security vendors on VirusTotal. While this level of detection does not confirm malicious intent beyond doubt, the combination of a recent registration date, cryptocurrency-themed branding, and active blocklist presence raises significant concerns. The Gridinsoft trust score of 35 out of 100 further supports the assessment of elevated risk, though the exact phishing tactics or payloads remain unverified. Defenders should treat this domain as actively malicious until proven otherwise. Network-level blocking of 172.67.128.126 and the domain itself is recommended for organizations handling cryptocurrency transactions or user credentials. Monitoring for related domains registered through NameCheap or leveraging Cloudflare infrastructure may help identify additional threats. Given the domain's recent creation and persistent activity, continued vigilance is advised, particularly for users encountering crypto-related offers or investment schemes.