genesisbola[.]biz

The domain genesisbola.biz was registered on February 21, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently taken offline. DNS resolution points to IP address 172.104.189.139, which is hosted in Singapore under AS63949 Akamai Connected Cloud. The authoritative nameservers are ns1.node541.myfcloud.com and ns2.node541.myfcloud.com, and the sole MX record points to the domain itself, indicating a lack of dedicated mail infrastructure. An Apache HTTP Server presents a 403 Forbidden page title, while the TLS certificate is issued by Let’s Encrypt (R12).

Infrastructure analysis reveals a Gridinsoft trust score of 0 / 100 and a single security blocklist entry, reinforcing the malicious reputation. Google Safe Browsing flags the domain for social engineering, and PhishDestroy has already blocked it. AlienVault OTX lists the domain in three separate threat‑intel pulses, and VirusTotal reports that 19 of 95 security vendors have flagged it, corroborating the phishing classification. The evidence base is limited to these technical indicators; there is no publicly available content describing the phishing payload or target brand.

Consequently, confidence in the domain’s use for a generic phishing campaign is high, but details of the specific luring technique remain unknown. Defenders should continue to block the domain at perimeter firewalls, update URL filtering feeds, and monitor for any resurgence of the domain or associated IP address. Incident response teams should also review any recent email traffic for references to genesisbola.biz, given the self‑referencing MX record, and consider hardening user awareness about social‑engineering attempts that reference similar domains.