app[.]apyx[.]cam

PhishDestroy has identified app.apyx.cam as a generic phishing domain with an elevated risk level, specifically designed to function as a crypto drainer that targets cryptocurrency wallet credentials. The site was taken offline after detection, but its recent creation and low trust indicators suggest it was part of a broader phishing campaign. Users who may have interacted with the domain should take immediate precautions to secure their digital assets.

Technical analysis reveals that app.apyx.cam was registered through Dynadot LLC on April 3, 2026, and resolves to IP address 188.114.97.3. The domain appears on one security blocklist, and VirusTotal data shows that 1 out of 95 security vendors flagged it as malicious. The SSL certificate was issued by Let's Encrypt (E7), which is commonly abused by phishing sites due to its free and automated issuance. The page title 'Just a moment...' is a typical Cloudflare challenge page, often used by malicious sites to obfuscate their true content or delay analysis. These indicators collectively point to a high probability of phishing activity, with low trust scores across multiple security platforms.

To mitigate the risk, users who visited app.apyx.cam should immediately revoke any permissions granted to the site, especially those related to wallet connections or browser notifications. It is crucial to run a full security scan using reputable antivirus software and change passwords for any accounts where credentials may have been entered. Additionally, enable two-factor authentication on all cryptocurrency wallets and monitor for unauthorized transactions. PhishDestroy recommends checking the domain against its blocklist and reporting any related phishing attempts to relevant authorities. Staying vigilant and verifying URLs before interacting with them remains the best defense against such threats.