dapps-apyxfi[.]app

Analysis of the domain dapps-apyxfi.app indicates that it was registered on 14 July 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain resolves to the IPv4 address 196.251.107.102, which is associated with a data centre in Germany operated by Femo IT Solutions Limited. The authoritative name servers are coco.bunny.net and kiki.bunny.net, both hosted by BunnyCDN. An HTTPS service is presented using a Let’s Encrypt certificate with the YR2 profile, and the web server reports an HTTP 200 status code. The page title returned by the server is “Apyx”, and the underlying technology stack includes Nginx, the jsDelivr content‑delivery network, and the crypto‑js JavaScript library.

Reputation signals show that the domain is currently listed on three independent security blocklists and has been actively blocked by PhishDestroy, MetaMask, and the SEAL blocklist. VirusTotal scans have recorded detections by two of ninety‑one antivirus or URL‑reputation engines, reinforcing the suspicion that the site is being used for malicious purposes. The threat classification supplied is “generic phishing” with a high risk rating, and the operational status is marked as active. While the specific target brand or service is not disclosed beyond the page title “Apyx”, the convergence of recent registration, the use of a freshly issued TLS certificate, and the presence on multiple phishing‑oriented blocklists suggest a deliberate attempt to lure users into a fraudulent interaction, possibly related to cryptocurrency services given the inclusion of crypto‑js. The limited detection count may reflect the short time the domain has been live.

Defenders should prioritize immediate containment of traffic to dapps-apyxfi.app, incorporate the domain into URL filtering and DNS sink‑hole policies, and monitor the associated IP address 196.251.107.102 for anomalous outbound connections.