repeg-apyxfi[.]xyz

This domain is actively distributing a crypto drainer targeting users of the Apyx platform. Crypto drainers are malicious scripts designed to empty digital wallets by tricking users into signing transactions that transfer assets to attacker-controlled addresses. The site mimics legitimate Apyx branding, including logos and interface elements, to deceive visitors into connecting their wallets or entering sensitive credentials. Once access is granted, the drainer silently executes unauthorized transactions, often resulting in complete loss of funds with no recovery mechanism. Analysis indicates the domain was registered on June 09, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with high-risk domains. Despite its recent creation, the site has already been flagged by three security blocklists, including PhishDestroy, MetaMask, and SEAL. Notably, VirusTotal reports zero detections out of 95 security engines, suggesting the campaign remains undetected by many automated systems. The page title explicitly displays 'Apyx,' reinforcing its impersonation of the legitimate platform and increasing the likelihood of successful deception. Users who visited repeg-apyxfi.xyz should immediately disconnect any connected wallets from the site and revoke all associated permissions using their wallet’s settings. It is critical to check wallet transaction histories for unauthorized transfers and transfer remaining assets to a new, secure wallet address. If credentials were entered, reset passwords and enable multi-factor authentication on all related accounts. Monitor financial statements and wallet activity for signs of compromise. Given the zero-detection status on VirusTotal, this threat may evade traditional security tools, so manual verification of wallet connections and transactions is strongly advised.