genesis-hub[.]cc

The domain genesis-hub.cc was registered on July 30, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently using the HE.NET name server cluster (ns2.he.net, ns3.he.net, ns4.he.net, ns5.he.net). DNS resolution points exclusively to the IPv4 address 192.162.199.184, indicating a single‑host deployment that is typical of fast‑flux or low‑cost phishing infrastructure. VirusTotal analysis shows that three of ninety‑one security vendors have flagged the domain, providing early evidence of malicious activity despite the relatively low detection count.

Independent blocklist monitoring confirms that the domain appears on one known security blocklist and has been added to the PhishDestroy blocklist, reinforcing the assessment of malicious intent. The threat is classified as generic phishing with a high risk rating, and the operational status remains active as of the report date, July 31, 2026. No additional intelligence such as SSL certificate details, HTTP response codes, page title, or associated brand identifiers has been published, leaving the content of the landing page unverified.

Consequently, analysts should treat the domain as hostile and enforce preventative controls: ingest the domain and its resolving IP into network and endpoint blocklists, monitor DNS queries for recurring resolution to 192.162.199.184, and apply URL filtering rules that deny traffic to the domain. Continuous re‑scanning on multi‑vendor platforms is recommended to capture any evolution in detection rates, and threat‑intel feeds should be updated to reflect the confirmed phishing designation.