geniusterminal[.]org

This domain, geniusterminal.org, is identified as a high-risk brand impersonation threat specifically designed to deceive users through a fraudulent airdrop scheme. The site mimics legitimate crypto token distributions, presenting itself as a platform to claim $GENIUS tokens under the guise of a "Free Crypto Airdrop 2024." Analysis confirms the domain operates as part of a broader crypto scam infrastructure, likely intended to harvest wallet credentials or deploy malicious smart contracts to drain funds from victims. Infrastructure analysis reveals the following technical indicators: the domain is flagged by 16 out of 95 security vendors on VirusTotal, indicating widespread detection. It was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on April 22, 2026, with an anomalous future creation date suggesting potential domain spoofing or registry manipulation. The domain resolves to the IP address 104.21.51.151 and appears on four distinct security blocklists. No association with Google Safe Browsing (GSB) was recorded at the time of analysis, though it is actively blocked by multiple wallet security providers. As of the latest assessment, geniusterminal.org has been taken offline, reducing immediate exposure risk. However, the infrastructure may persist or re-emerge under similar domains. Users who interacted with the site should revoke any connected wallet permissions, monitor transaction histories for unauthorized activity, and verify future airdrop offers through official project channels. The anomalous registration date and rapid blocklisting underscore the need for heightened scrutiny of domains promoting unsolicited token distributions.