heyosole[.]co[.]com

heyosole.co.com is a generic phishing domain that was used in a crypto scam campaign. It is currently under investigation and has been taken offline. No specific brand was impersonated, and no drainer kit was identified. The domain poses a risk to users who may have interacted with it, as it was designed to steal cryptocurrency or sensitive information.

Technical indicators for heyosole.co.com include 0 of 95 VirusTotal vendors flagging it as malicious, and Google Safe Browsing did not flag the domain. The domain was created on February 21, 2026, and resolves to IP address 185.21.12.127, located in the Netherlands (AS216071 SERVERS TECH FZCO). It appears on 1 security blocklist, specifically PhishDestroy. The SSL certificate was issued by R12, and the nameservers are dns1.regway.com, dns2.regway.com, dns3.regway.com, and dns4.regway.com. No page title was observed.

If you have interacted with heyosole.co.com, take immediate safety steps. Since this was a crypto scam, revoke any token approvals you may have granted and move your funds to a new, secure wallet. If you provided login credentials, change your passwords on all affected accounts and enable two-factor authentication. Monitor your accounts for unauthorized activity and report the domain to PhishDestroy or your local cybercrime authority.