opus-genesis[.]xyz

This domain is flagged as an active phishing portal targeting cryptocurrency users by mimicking a legitimate wallet or exchange interface. Analysis indicates the site is designed to capture sensitive credentials, including private keys or seed phrases, through fraudulent login or transaction prompts. The infrastructure uses modern frontend frameworks (Vue.js, Nuxt.js) to create a convincing facade, while Cloudflare obfuscates the true origin of the attack. Evidence confirms the domain's malicious intent through multiple technical indicators. VirusTotal reports 7 out of 95 security vendors flagging opus-genesis.xyz as malicious, and it appears on 4 distinct security blocklists. The domain was registered on April 12, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. Additional detections by wallet security tools further corroborate its classification as a credential-harvesting threat. Users who interacted with opus-genesis.xyz should immediately revoke any connected wallet permissions and transfer assets to a new, secure wallet. All credentials entered on the site must be considered compromised. Monitor transaction histories for unauthorized activity and report the domain to relevant security teams for further mitigation. Avoid reusing passwords or seed phrases across platforms, and verify domain authenticity before entering sensitive information.