spacex-network[.]com

This domain is flagged for elevated risk due to active crypto drainer operations impersonating the SpaceX brand. Analysis indicates the site promotes a fraudulent SpaceX Token (SPAX) presale, leveraging brand recognition to deceive victims into connecting wallets and executing malicious smart contracts designed to drain cryptocurrency assets. Infrastructure analysis reveals the domain was registered on April 18, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to IP address 104.21.54.198 and employs Cloudflare with HTTP/3 for traffic obfuscation. The domain appears on one security blocklist and is detected by 3 of 95 security vendors on VirusTotal. The page title explicitly advertises "SpaceX Token (SPAX) | Official Presale — Up to 200% Bonus," a common tactic to lure targets with unrealistic financial incentives. Mitigation requires immediate blocking of the domain and associated IP at network perimeter controls. Security teams should deploy detection rules for wallet-draining smart contract interactions linked to this campaign, particularly those referencing SPAX or SpaceX branding. End-user education must emphasize verifying token presales through official company channels, as legitimate organizations do not offer 200% bonuses. Monitoring for similar domains using the same registrar or IP range is recommended to identify related infrastructure.