proposal-apyxfi[.]xyz

The domain proposal-apyxfi.xyz is currently operating as an active phishing endpoint targeting cryptocurrency wallet users. Analysis indicates this infrastructure is designed to harvest sensitive credentials through a fraudulent interface impersonating Apyx, a legitimate decentralized finance platform. The threat type is classified as cryptocurrency credential phishing with a high-risk assessment due to its operational status and detection profile. Infrastructure analysis reveals the domain was registered on June 10, 2024, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with malicious registrations. The domain appears on three distinct security blocklists, including specialized cryptocurrency threat intelligence feeds. VirusTotal detection metrics show 5 of 95 security vendors have flagged this domain as malicious, with specific classifications including phishing and fraudulent credential harvesting. The page title 'Apyx' confirms the impersonation attempt, while the unique seed identifier 288f0d distinguishes this campaign instance from related infrastructure. Current status remains active as of analysis, with no evidence of takedown or mitigation. Organizations and individuals are advised to implement immediate blocking of this domain at the network perimeter and endpoint levels. Cryptocurrency wallet users should verify all transaction requests through official channels only, particularly those involving Apyx-branded interfaces. Security teams should monitor for related domains registered through the same registrar and sharing similar naming patterns, as this campaign likely represents one node in a broader phishing operation targeting decentralized finance users.