soeoeiua[.]com

The domain soeoeiua.com was registered through Dominet (HK) Limited on May 13, 2025 and is currently taken offline. Infrastructure analysis shows that the domain resolves to IP address 104.21.36.125, which belongs to AS13335 Cloudflare, Inc. and is geolocated to the United States. The presented SSL certificate, identified as WE1, is active for the host, indicating that TLS is correctly configured.

VirusTotal reports that 2 of 93 security vendors have flagged the domain, providing limited but corroborating evidence of malicious intent. The site appears on a single security blocklist, with PhishDestroy listed as the blocking entity, and Scamadviser assigns a trust score of 1 out of 100, reflecting an extremely low reputation. The page title returned from the HTTP response is "SOEO," and the campaign is classified as a brand impersonation targeting the brand Celer.

While the available data confirms the registration details, hosting location, TLS usage, and partial vendor detection, several elements remain unverified: the specific payload or credential‑harvesting mechanisms, the exact phishing kit employed, and any redirects or additional infrastructure beyond the listed IP. Defenders should update their URL filtering and DNS blocklists to include soeoeiua.com, monitor for any resurgence of the domain or related subdomains, and enforce TLS inspection to capture any hidden traffic should the site be re‑activated. Continuous observation of Cloudflare‑hosted IP ranges for similar patterns is recommended, as is the inclusion of the domain in threat‑intel feeds to alert downstream security controls.