genka-ai[.]world

The domain genka-ai.world was a phishing site engaged in brand impersonation targeting MetaMask users, classified as a cryptocurrency scam. It posed as a legitimate service to deceive victims into disclosing wallet credentials or sensitive information, though no drainer kit was identified. The site is currently taken offline, but its prior activity warrants caution for those who may have interacted with it.

Technical analysis of genka-ai.world revealed limited detection, with 1 of 95 VirusTotal security vendors (Gridinsoft) flagging it as malicious. The domain was created on February 21, 2026, and resolved to the IP address 188.114.96.3, hosted by Cloudflare, Inc. (AS13335) in the US. It appeared on one security blocklist (PhishDestroy) and used an SSL certificate issued by WE1. The observed page title was 'Genka AI', and Google Safe Browsing did not flag the domain at the time of assessment.

Individuals who visited genka-ai.world should immediately revoke any token approvals granted to unknown contracts and consider transferring funds to a new wallet. If credentials were entered, change passwords for associated accounts and enable two-factor authentication (2FA) where possible. Monitor accounts for unauthorized transactions or suspicious activity. Report the domain to relevant platforms, such as MetaMask’s official reporting channels or anti-phishing organizations like PhishTank, to aid in broader mitigation efforts.