spax40b[.]net

This domain, spax40b.net, is identified as an active crypto presale phishing site targeting users with promises of an AI-powered token offering up to 200% early bonuses. The page title, 'SPAX40B Token — AI-Powered Crypto Presale | Up to 200% Early Bonus,' aligns with known tactics used in fraudulent cryptocurrency presale schemes, where victims are lured into transferring funds under false pretenses. No legitimate brand association or drainer kit signature has been confirmed, but the domain exhibits characteristics consistent with opportunistic phishing campaigns in the cryptocurrency sector.

Infrastructure analysis reveals multiple technical indicators supporting the elevated risk assessment. The domain was registered on April 18, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. It resolves to the IP address 104.21.46.229, which has been flagged in prior malicious activity reports. VirusTotal detection metrics show 5 out of 95 security vendors marking the domain as malicious, while it appears on one security blocklist. Google Safe Browsing status remains unconfirmed, but the domain is actively blocked by at least one threat intelligence platform.

Current status indicates the domain remains active and operational, posing an ongoing threat to users. Response actions should include immediate blocking of the domain and IP at the network level, along with monitoring for related infrastructure. Despite existing detections, the remaining risk is elevated due to the domain's recent creation, active hosting, and targeted phishing theme. Users are advised to avoid interaction, and security teams should treat any associated wallet addresses or transaction prompts as fraudulent.