soiaxy[.]com
“Bitcoin Hyper BTC Layer 2 | Best Crypto Presale To Buy Now”
Resumen de las pruebas
Analysis indicates that the domain soiaxy.com was registered on February 21, 2026 through Hello Internet Corp and is currently hosted on IP address 104.168.69.100, which belongs to AS36352 operated by HostPapa in the United States. The site presents the page title “Bitcoin Hyper BTC Layer 2 | Best Crypto Presale To Buy Now” and is classified as a brand impersonation campaign targeting the Bitcoin brand. No SSL certificate is observed for the domain, meaning the site is served over plain HTTP. The domain appears on five independent security blocklists and is actively blocked by PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura, indicating consensus among multiple threat‑intelligence feeds.
VirusTotal reports three detections out of ninety‑five scanning engines, providing additional confirmation of malicious intent. Nameserver records point to ram.ns.cloudflare.com and teagan.ns.cloudflare.com, which are typical of Cloudflare‑managed domains but do not mitigate the observed abuse. The hosting infrastructure resides in the United States under AS36352, and the IP address is presently taken offline, reducing immediate exposure but still warranting monitoring in case the server is re‑activated. The available evidence does not include a detailed content review beyond the page title, so the specific tactics employed on the landing page remain uncertain.
Defenders should add soiaxy.com to URL filtering rules, block the associated IP address, and monitor DNS queries for the domain and its nameservers. Continuous inspection of traffic to the hosting ASN and periodic re‑scanning with VirusTotal or similar services are recommended to detect any future re‑deployment. Because the domain impersonates Bitcoin, security teams should also alert users and stakeholders in cryptocurrency‑related services to the potential credential‑harvesting risk.
Data Coverage
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 11/08/2026
6 fuentes externas supervisadas Sin coincidencias
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, nombres TLS y marcas de tiempo
ICANN OVERSIGHT
Acreditación y contexto RAA
Acreditación y contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análisis de VirusTotal
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.