spacesxwallet[.]com

This domain, spacesxwallet.com, is identified as a crypto drainer phishing site designed to deceive cryptocurrency users by impersonating an official SpaceX token presale. The site falsely advertises a SpaceX Token (SPAX) with promises of up to 200% bonuses, a common tactic to lure victims into connecting their wallets to malicious smart contracts. Once connected, these contracts execute unauthorized transactions, draining funds from the victim’s wallet without consent. The threat is classified as elevated due to its direct financial impact and the sophistication of the social engineering techniques employed.

Infrastructure analysis reveals multiple indicators of malicious intent. The domain was registered on May 25, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. It resolves to the IP address 188.114.97.3 and is currently flagged by 14 out of 95 security vendors on VirusTotal. Additionally, the domain appears on one security blocklist and is actively blocked by PhishDestroy. The SSL certificate is issued by Let’s Encrypt, a common choice for both legitimate and malicious sites, which does not mitigate the domain’s fraudulent nature. The Gridinsoft trust score of 0/100 further corroborates its classification as a high-risk entity.

Users who visited spacesxwallet.com or interacted with its content should take immediate action to mitigate potential losses. Disconnect any wallets connected to the site and revoke permissions for any associated smart contracts using a blockchain explorer or wallet management tool. Monitor wallet activity for unauthorized transactions and transfer remaining funds to a new, secure wallet if suspicious activity is detected. Report the domain to relevant security platforms to aid in broader threat intelligence efforts and remain vigilant against similar phishing schemes targeting cryptocurrency users.