Analysis of the domain genesis-standx.com shows a newly registered internet resource that aligns with a generic phishing profile. The domain was created on July 31, 2026 and is currently active, resolving to the IP address 188.114.96.3. Its authoritative name servers are danica.ns.cloudflare.com and julian.ns.cloudflare.com, indicating use of Cloudflare’s DNS infrastructure. Registration was performed through Spaceship, Inc., a registrar that is frequently observed in malicious deployments but does not alone constitute malicious intent.
The site appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service, providing independent corroboration of its malicious nature. VirusTotal records indicate that the domain has been scanned by 91 vendors, with none reporting a detection at the time of analysis; this lack of detections should not be interpreted as evidence of safety, as many phishing sites evade automated signatures. The page title returned by the web server is simply "genesis-standx.com/", offering no additional context about the targeted brand or lure employed. No further intelligence such as SSL certificate details, Safe Browsing status, or content snapshots is available, leaving the precise phishing vector and victim profile uncertain.
Defenders should treat the domain as hostile: add the IP address 188.114.96.3 to outbound and inbound blocklists, monitor DNS queries for the associated Cloudflare name servers, and enforce URL filtering rules that deny access to the domain. Continuous re‑scanning with sandbox and reputation services is recommended to capture any future changes in payload or hosting infrastructure. Organizations should also watch for related domains registered through the same registrar or using the same name server pattern, as threat actors often operate in batches.