m[.]sophon[.]design
“Abaxx Exchange”
Evidence Summary
This report analyzes the domain m.sophon.design, which presents itself as "Abaxx Exchange." Based on the available data, this site is likely an impersonation or fraudulent copy of the legitimate Abaxx Exchange brand, posing a threat of phishing, credential theft, or financial fraud targeting users of that exchange.
Technical evidence shows the domain was flagged by 12 out of 95 VirusTotal vendors, including ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, and CRDF. It appears on 1 blocklist. The domain was registered on 2025-06-02 through Porkbun LLC, a relatively recent creation date. It resolves to IP address 104.194.152.8, located in Singapore, and hosted by AS14956 RouterHosting LLC. The site uses a Let's Encrypt SSL certificate (R12) and employs nameservers curitiba.ns.porkbun.com, fortaleza.ns.porkbun.com, maceio.ns.porkbun.com, and salvador.ns.porkbun.com.
Currently, the domain is DOWN/OFFLINE and holds a GridinSoft trust rating of 0 out of 100, indicating high risk. The combination of a recent registration, multiple security vendor flags, and impersonation of a financial brand suggests this domain was set up for malicious purposes. Its offline status may be temporary or due to takedown efforts. Risk level is assessed as high based on the provided data.
Data Coverage
Threat Response Pipeline
Blocklist coverage
10 monitored external feeds · stored snapshot Aug 11, 2026
10 monitored external feeds No match
Detection timeline
-
VirusTotal
12 → 13
Stored Capture
Domain Intelligence
Technical detailsDNS, TLS names and timestamps
ICANN OVERSIGHT
Registration: sophon.design
Accreditation and RAA context
Accreditation and RAA context
Registrar accreditation and DNS abuse obligations
For the registrable domain sophon.design behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal Analysis
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of m.sophon.design · checked Mar 2, 2026
Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive