Security Scan Report: hyperfoundationregistry.xyz

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 2 countries across 7 domains to perform 87 HTTP transactions. The main domain is hyperfoundationregistry.xyz and was registered 1 week ago.

Submitted URL: https://hyperfoundationregistry.xyz/checker/

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Site claims to be 'Hyper Foundation — $HYPE Season 2' on a 3-day-old unranked domain that is not the official Hyperliquid domain — a textbook crypto airdrop/wallet-drainer impersonation. Do not connect a wallet.

Risk Factors (5)
Impersonation of the Hyper Foundation / Hyperliquid brand on a non-official, 3-day-old domain
Fake '$HYPE Season 2' airdrop eligibility checker — common crypto wallet-drainer lure
Domain age 3 days (CRITICAL risk category)
Domain unranked in Cisco Umbrella top 1M
Circular redirect chain
Domain age information unavailable

Details

Page Title

Hyper Foundation — $HYPE Season 2

Scan Type

public

Domain Name Analysis

The domain name 'hyperfoundationregistry.xyz' uses the open generic top-level domain (.xyz). The registrable portion 'hyperfoundationregistry' spans 23 characters containing 8 vowels alongside 15 consonants. It segments into 3 words: hyper, foundation, registry. Expect eight characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hyperfoundationregistry.xyz/checker/

Page Load Overview

5.55s
Total Load Time
3.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:33 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
17188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1018.245.60.125Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
10104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10185.111.111.154Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
10188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1018.245.60.65Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
10104.18.19.237Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10104.18.18.237Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
878--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T126841BFCEB70599C4D8887CA7F01BFA96C1290B6955D8B84F04CCA5BD7C281FE94A943

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:acCZvsCKNEEEiFO1rcadUQjByQ9lZzIZSchPDKufpxGfPGrq+86q7dXfhR1sa:azDWHa

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:400167:ABJEGAKEI5AHhwhCAJuNIHJIHCFGDUMsChowKkmCBgGgowHKMIkHZjguAI+BSgoMsIgBABKAhZIkiDEACUUKDop3hQI3mUUt

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7e0101383c18c0c0
Perceptual Hash:c887f283d287dc93
Difference Hash:e08f7761e1f30881
Wavelet Hash:7f03133d7d38e0e0
Color Hash:#cae06c

Scan History

Scan history not available

Unable to load historical scan data