hypergenesis[.]icu

This domain, hypergenesis.icu, is flagged as a confirmed crypto credential theft operation targeting users through a fabricated 'Genesis Event' theme. Analysis indicates the site was designed to harvest wallet credentials, likely through a fake blockchain event portal, with no direct evidence of a crypto drainer kit but strong indicators of credential interception mechanisms. The page title 'Genesis Event' suggests an attempt to impersonate legitimate blockchain project launches or token generation events, a common tactic to lure cryptocurrency users into entering sensitive information. Infrastructure analysis reveals the domain was registered on March 12, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, and currently resolves to the IP address 188.114.96.3. Security vendor detection on VirusTotal stands at 2/95, with the domain appearing on three independent security blocklists. Technologies detected include Cloudflare and HTTP/3, which may have been leveraged to obfuscate malicious activity and evade initial detection. The domain is blocked by multiple security entities, including MetaMask and PhishDestroy, indicating prior confirmation of its malicious intent. As of the latest assessment, hypergenesis.icu has been taken offline, reducing immediate risk to end users. However, the domain remains registered and could be reactivated or repurposed for future malicious campaigns. Organizations and individuals are advised to maintain blocklist entries for this domain and monitor for any re-emergence. Users who may have interacted with the site should immediately revoke any connected wallet permissions and conduct a security audit of their cryptocurrency assets. The elevated risk level is retained due to the domain's registration persistence and the potential for infrastructure reuse.