soeoxoaq[.]com

The domain soeoxoaq.com was a phishing site engaged in brand impersonation targeting the Celer platform. It posed an elevated risk by mimicking Celer’s official branding to deceive users into disclosing sensitive information or interacting with fraudulent content. No crypto drainer kit was identified in this campaign. The site is currently taken offline, reducing immediate exposure, but users who visited soeoxoaq.com should remain vigilant for follow-up scams or unauthorized activity.

Technical analysis of soeoxoaq.com reveals limited detection at the time of assessment, with only 1 of 95 VirusTotal security vendors flagging the domain. The domain was registered through Dominet (HK) Limited on May 13, 2025, and resolved to the IP address 172.67.130.59, hosted on Cloudflare’s infrastructure in the US. It appeared on a single security blocklist (PhishDestroy) and used an SSL certificate issued by WE1. The observed page title was 'SOEO', which does not match Celer’s legitimate branding, further indicating its fraudulent nature.

Users who interacted with soeoxoaq.com should immediately change any credentials entered on the site and enable two-factor authentication on their Celer and related accounts. Monitor financial and transactional activity for signs of fraud, particularly if crypto assets were involved. Report the phishing domain to platforms such as Google Safe Browsing, the Anti-Phishing Working Group (APWG), or local cybersecurity authorities to aid in broader mitigation efforts.