app-hyperbeat[.]xyz

The domain app-hyperbeat.xyz is identified as a generic phishing site targeting cryptocurrency users through a fraudulent staking scheme. Analysis indicates the site impersonates a legitimate platform under the name HyperBeat, using the page title 'HyperBeat — Earn, Stake' to lure victims into disclosing wallet credentials or transferring digital assets. Current status confirms the domain has been taken offline, though prior activity remains a documented threat. Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC on August 09, 2025, and resolved to the IP address 186.2.175.35. Detection metrics show 16 of 95 security vendors on VirusTotal flagged the domain as malicious, while it appears on two independent security blocklists. Protective measures were implemented by multiple entities, including MetaMask and SEAL, to block access. The site employed DDoS-Guard as a hosting proxy, a service frequently associated with obfuscating malicious infrastructure. As of the latest assessment, app-hyperbeat.xyz remains offline, though residual risk persists for users who may have interacted with the domain during its active period. Security practitioners recommend immediate revocation of any credentials or wallet access shared with the site. Users should verify domain authenticity through official channels before engaging with cryptocurrency platforms and monitor accounts for unauthorized transactions. Network-level blocking of the IP 186.2.175.35 is advised for organizations seeking to prevent residual exposure.