spacexteslatradeshare[.]com

This domain is flagged as an active brand impersonation site targeting Google, operating under the guise of a tech support scam. Registered on August 2, 2025, through Dynadot LLC, it resolves to IP 198.251.89.144 (AS53667 FranTech Solutions, US) and uses nameservers ns15.my-control-panel.com and ns16.my-control-panel.com. The site presents a page title of 'Home - SpaceX Tesla Trade Share,' which does not align with the reported Google impersonation, suggesting either a secondary lure or misdirection. Infrastructure analysis reveals WordPress, MySQL, PHP, Yoast SEO, LiteSpeed, Swiper, jsDelivr, and jQuery Migrate, indicating a standard but potentially compromised content management setup. The domain is currently active, returning an HTTP 301 redirect, and is blocked by at least one security vendor (PhishDestroy). Two of 95 security vendors on VirusTotal flag the domain, though the specific detection context is not detailed. The SSL certificate is issued by Let's Encrypt (R12), which is common for both legitimate and malicious sites. Defenders should treat this domain as high-risk due to its confirmed tech support scam classification, brand impersonation, and presence on a security blocklist. Recommended actions include blocking the domain and IP at network perimeters, monitoring for related infrastructure (e.g., hosting provider, nameservers), and alerting users to the tech support scam vector. The exact content and redirection behavior remain unanalyzed, so further investigation is advised to determine final landing pages or additional payloads.