Genesis-cheats.cc was registered on July 16, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently hosted on Cloudflare infrastructure, resolving to 172.67.170.191. The authoritative name servers are charles.ns.cloudflare.com and evangeline.ns.cloudflare.com, confirming the use of Cloudflare’s DNS service. The domain is listed as active and appears on a single security blocklist; it is also blocked by the PhishDestroy feed.
VirusTotal has recorded four positive detections out of ninety‑one submitted scanners, indicating that multiple security engines have identified malicious characteristics. No additional public intelligence such as Safe Browsing verdicts, OTX references, or SSL certificate details were provided. The limited detection footprint suggests a recent deployment, consistent with the July 16 creation date, and the short window for broader blocklist propagation.
Because the domain is actively resolving and is already flagged by multiple sources, network defenders should enforce outbound filtering for the IP 172.67.170.191, add the domain to internal blocklists, and monitor DNS queries for the associated Cloudflare name servers. Threat hunting teams should also query recent phishing‑related telemetry for payloads or URLs that reference this domain, and consider expanding sink‑hole coverage to capture any future C2 or exfiltration attempts. Continued observation is recommended to capture any evolution of the site’s content or additional detections from security vendors.