spax70p[.]pro

Analysis of the domain spax70p.pro indicates an active brand impersonation campaign targeting SpaceX, classified as a fake airdrop scam. The domain was registered on May 11, 2026, through IONOS SE, a registrar commonly associated with both legitimate and malicious infrastructure. It resolves to the IP address 217.160.0.10, hosted by Ionos Inf in Germany. The page title, 'SPAX70P Official Site™ | Buy SPAX70P | SpaceX Token | 200% Bonus,' explicitly promotes a fraudulent token offering under the SpaceX brand, suggesting an attempt to deceive users into participating in a non-existent airdrop or investment scheme. Infrastructure analysis reveals the domain is configured with four nameservers: ns1046.ui-dns.org, ns1027.ui-dns.de, ns1086.ui-dns.biz, and ns1112.ui-dns.com, all managed by the same provider. The SSL certificate is issued by Sectigo Limited under the Sectigo Public Server Authentication CA DV R36, a common certificate authority used by both legitimate and malicious sites. While the presence of a valid SSL certificate may lend an appearance of legitimacy, it does not indicate trustworthiness. Threat intelligence sources show the domain appears on one security blocklist and was flagged in a single AlienVault OTX pulse, though the specific indicators of compromise or associated campaigns are not detailed in available data. Gridinsoft assigns the domain a trust score of 0/100, reflecting high-risk classification. At the time of analysis, the domain returns an HTTP 200 status, confirming it remains accessible. Defenders should treat spax70p.pro as an active threat. Network-level blocking of the IP 217.160.0.10 and domain-based filtering are recommended to prevent user exposure. Given the domain’s recent registration and explicit branding, monitoring for similar domains using SpaceX-related keywords or IONOS-hosted infrastructure may help identify additional malicious activity.