bilaxyusbtc[.]com

Analysis of bilaxyusbtc.com shows the domain was registered on May 20, 2025 through Gname.com Pte. Ltd. The site presented the page title “Bilaxy” and is classified as a brand‑impersonation campaign targeting the Sui ecosystem. Infrastructure inspection reveals the domain resolves to IP 156.59.246.49, which belongs to AS21859 Zenlayer Inc and is geolocated in India. The SSL certificate presented is identified as “R11”, indicating a self‑signed or low‑trust certificate. Reputation services flag the domain as highly suspicious: Gridinsoft assigned a trust score of 0 out of 100, and PhishDestroy has listed it as blocked.

VirusTotal records a single positive detection out of 95 scanned vendors, confirming at least one security product identified malicious behavior. The domain appears on one additional security blocklist. As of the reporting date (July 24, 2026) the site is taken offline, but the underlying IP and hosting provider remain active and could be reused for future campaigns.

Defenders should add 156.59.246.49 to network deny lists, monitor DNS queries for bilaxyusbtc.com and any subdomains, and ensure that email filters block messages referencing the “Bilaxy” title or the Sui brand. Continuous telemetry from threat‑intel feeds should be consulted for any re‑registration attempts or related domains hosted on the same IP range. Given the low trust score, the single vendor flag, and the explicit brand‑impersonation intent, the domain should be treated as elevated risk until confirmed clean.