Security Scan Report: hyperfoundationqualify.xyz

Site favicon
Submitted: Completed: publiccompleted
This website contacted 12 IPs in 2 countries across 8 domains to perform 99 HTTP transactions. The main domain is hyperfoundationqualify.xyz and was registered 1 week ago.

Submitted URL: https://hyperfoundationqualify.xyz/checker/

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

One-day-old lookalike domain presenting itself as 'Hyper Foundation — $HYPE Season 2' with an airdrop eligibility checker. No forms or malware found, but brand impersonation on a brand-new unranked host makes this unsafe to interact with.

Risk Factors (5)
Impersonation of a different entity's brand (Hyper Foundation / $HYPE) on a non-official domain
Domain registered 1 day ago (CRITICAL age bracket)
Unranked domain with no established reputation
Crypto airdrop 'eligibility check' funnel, a common wallet-drainer/phishing pattern
Circular redirect on the final URL
Domain age information unavailable

Details

Page Title

Hyper Foundation — $HYPE Season 2

Scan Type

public

Domain Name Analysis

The domain 'hyperfoundationqualify.xyz' uses the open generic top-level domain (.xyz) with no subdomain. The core label 'hyperfoundationqualify' covers 22 characters split between 9 vowels and 13 consonants. Breaking it apart gives three words: hyper, foundation, qualify. Average segment length settles at seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hyperfoundationqualify.xyz/checker/

Page Load Overview

1.47s
Total Load Time
3.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:33 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media63% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

entertainment media
63%
cryptocurrency blockchain
52%
finance banking
37%
adult content
36%
government public service
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
818.245.60.125Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
8104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8185.111.111.157Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
8185.111.111.155Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
8188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
818.245.60.65Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
8104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8104.18.18.237Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8104.20.46.121Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9912--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T110841BFCEB70599C4D8887CA7F01BFA96C1290B6955D8B84F04CCA5BD7C281FE94A943

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:acCZvsCKNEEEiFO1rcadUQjByQ9lZzIZSchPDKufpxGfPGrq+86q7dXfhR1Ha:azDW+a

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:400168:gjJbADaoJHSqwBmJXEAgHSq0FFCEAAscZwPKhCIFCsWRCoGGICI42EEshPBFKAIcEUBjHMUJQI8lhkBskVnJcMAyUJgJYDoU

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7e0101393c1800c0
Perceptual Hash:c887d287d287d897
Difference Hash:e08f7761e1b38880
Wavelet Hash:7f03133d7d78c0e0
Color Hash:#d2692d

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data