spacexstockmarket[.]com

On 22 July 2026 the domain spacexstockmarket.com was observed to be taken offline. The site was registered through NameSilo, LLC on 12 July 2025 and is hosted on Cloudflare infrastructure (AS13335) with the IP address 172.67.175.132 located in the United States. DNS resolution points to the authoritative nameservers agustin.ns.cloudflare.com and annabel.ns.cloudflare.com. No TLS certificate was presented for the host, indicating HTTP‑only service at the time of capture. The page title returned by the server was “SpaceXstockMarket | A world‑class Elite experience”, which does not reference the impersonated brand.

Threat intelligence classifies the domain as a brand‑impersonation campaign targeting Apple, despite the unrelated domain label. The domain appears on a single security blocklist and is blocked by the PhishDestroy service. A Gridinsoft trust score of 0 out of 100 further confirms the malicious nature of the host. VirusTotal analysis recorded a single positive detection out of 95 scanning engines, reinforcing the suspicion. The limited detection footprint suggests the payload or lure has not been widely distributed, but the presence on a blocklist and the low trust score warrant immediate defensive action.

Uncertainties remain regarding the exact content served before takedown, as the page title does not reveal Apple‑related branding and no SSL certificate was observed, limiting insight into possible credential‑harvesting forms. No additional sandbox or URL‑based analyses have been published, and the domain’s short lifespan (just over one year) provides limited historical context. Defenders should add 172.67.175.132 to network‑level deny lists, block DNS resolution for spacexstockmarket.com, and ensure that any outbound HTTP requests to this host are intercepted. Monitoring for similar Cloudflare‑hosted domains that resolve to the same nameservers or exhibit a Gridinsoft score of zero can help surface related campaigns.