genesis-apyx[.]com

The domain genesis-apyx.com has been identified as a phishing infrastructure specifically targeting cryptocurrency wallet users. Analysis confirms this domain operated as a crypto wallet phishing site, designed to harvest credentials or private keys from unsuspecting victims. As of the latest verification, the domain has been taken offline, though residual risks may persist due to prior exposure. Infrastructure analysis reveals the domain was flagged by 5 of 95 security vendors on VirusTotal, indicating moderate but consistent detection across threat intelligence platforms. The domain was registered through Global Domain Group LLC on May 28, 2026, an unusual future date that may suggest domain spoofing or registry manipulation. It resolved to the IP address 172.67.128.141, a Cloudflare-hosted endpoint, and utilized a Let's Encrypt SSL certificate for encryption. The domain appeared on three distinct security blocklists, and independent trust scoring assigned it a 0/100 rating. Detected technologies included jsDelivr for content delivery, HSTS for forced HTTPS enforcement, and crypto-js, likely used to obfuscate malicious JavaScript payloads. Current status indicates the domain is offline, though historical exposure remains a concern for users who may have interacted with it during its active phase. Organizations and individuals are advised to verify browser history, wallet transaction logs, and local device integrity for signs of compromise. Network-level protections should include updating firewall rules to block the domain and associated IP, while endpoint security solutions should be configured to detect and prevent access to known phishing indicators. Users who visited the site should assume credential exposure and rotate any potentially affected wallet keys or passwords immediately.