repeg-apyx[.]finance

The domain repeg-apyx.finance is identified as a generic phishing site impersonating Apyx, a well-known brand. The site was designed to deceive users by mimicking legitimate Apyx pages, potentially to steal sensitive information such as login credentials or financial data.

Infrastructure analysis reveals that the domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on June 09, 2026. The domain resolves to the IP address 188.114.97.3 and was previously flagged by 6 out of 95 security vendors on VirusTotal. The SSL certificate for the domain was issued by Google Trust Services, which may have been used to add a false sense of security for potential victims. The site utilized technologies such as jsDelivr, crypto-js, and Cloudflare, and was capable of supporting HTTP/3. Additionally, the domain appears on three security blocklists and is blocked by MetaMask, PhishDestroy, and SEAL. AlienVault OTX has also listed the domain in two threat intelligence pulses.

The domain is currently offline, indicating that it may have been taken down by security measures or the operators themselves. Despite this, the infrastructure and remaining blocklist presence suggest that there is an elevated risk of further phishing attempts using similar methods. Users are advised to exercise caution when interacting with any links or domains that claim to be related to Apyx and to verify the authenticity of the site through official channels.