genergynexus[.]com

Analysis indicates that genergynexus.com is currently active and classified as a high‑risk brand‑impersonation domain targeting WordPress. The domain was registered on 7 Nov 2025 through Hostinger operations (UAB) and resolves to the IP address 84.32.84.32, which belongs to AS47583 Hostinger International Limited situated in Lithuania. DNS configuration shows the domain uses the parking nameservers ns1.dns-parking.com and ns2.dns-parking.com, while MX records point to mx1.hostinger.com (priority 5) and mx2.hostinger.com (priority 10). The web server presents a TLS certificate issued by Let’s Encrypt (E7) and returns HTTP 200 with the page title “Parked Domain name on Hostinger DNS system”. Detected technologies include Nginx, OpenResty, Vue.js, Hostinger Website Builder, HSTS, Cloudflare, and HTTP/3. Threat intelligence from AlienVault OTX lists the domain in a single pulse, and PhishDestroy has added it to its blocklist. The Gridinsoft trust score is 0/100 and the domain appears on one additional security blocklist. VirusTotal scans show six of ninety‑five scanners flagging the domain, reinforcing the malicious assessment. Evidence confirms the domain is being used for brand impersonation of WordPress, though the exact payload or phishing page content has not been publicly disclosed. Defenders should block traffic to 84.32.84.32 and to the domain name at DNS and proxy layers, monitor for any email activity using the listed MX hosts, and update endpoint protection signatures to include this indicator. Ongoing observation is advised to capture any future changes to the site’s content or infrastructure.