spax41k[.]com

This domain, spax41k.com, is flagged as a crypto token scam targeting users with fraudulent presale offers. The site presents itself as an AI-powered cryptocurrency token presale, promising unrealistic bonuses of up to 200% for early access. Analysis indicates this is a financially motivated scam designed to drain funds from victims under the guise of a legitimate investment opportunity. The domain remains active and is under further investigation for malicious intent. Infrastructure analysis reveals the domain was registered on May 23, 2026, through NameSilo, LLC, and currently resolves to the IP address 104.21.75.213, hosted on Cloudflare’s network (AS13335). VirusTotal reports zero detections out of 95 vendors, suggesting the domain has not yet been widely flagged. However, it appears on one security blocklist, specifically PhishDestroy, indicating prior identification as malicious. The SSL certificate is issued by Let’s Encrypt, a common choice for both legitimate and fraudulent sites due to its accessibility and cost-free nature. Current status shows the domain remains active and operational, continuing to host the fraudulent presale page. Users are advised to exercise extreme caution and avoid interacting with the site or sending any cryptocurrency to associated wallets. Security teams should monitor for related domains registered under the same registrar or resolving to the same IP range. Blocking the domain at the network level and flagging associated cryptocurrency wallet addresses for transaction monitoring is recommended. Organizations should also update detection rules to include this domain and its infrastructure indicators to prevent further exploitation.