Security Scan Report: hyperfoundationinspect.xyz

Site favicon
Submitted: Completed: publiccompleted
This website contacted 15 IPs in 2 countries across 8 domains to perform 99 HTTP transactions. The main domain is hyperfoundationinspect.xyz and was registered 1 week ago.

Submitted URL: https://hyperfoundationinspect.xyz/checker/

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

1-day-old unranked domain posing as Hyper Foundation with a $HYPE Season 2 'eligibility/allocation' checker — a textbook wallet-connect airdrop phishing lure. No forms or malware found, but the brand impersonation drives the risk high.

Risk Factors (5)
Impersonation of a different entity's brand (Hyper Foundation / $HYPE) on a non-official domain
Domain registered 1 day ago (CRITICAL age category)
Unranked domain (not in Cisco Umbrella top 1M) claiming a well-known crypto brand
Airdrop 'check eligibility / estimated allocation' lure, the standard shape of wallet-drainer phishing
Circular redirect on the final URL
Domain age information unavailable

Details

Page Title

Hyper Foundation — $HYPE Season 2

Scan Type

public

Domain Name Analysis

Domain 'hyperfoundationinspect.xyz' uses the open generic top-level domain (.xyz) while skipping any subdomain. Count 22 characters in 'hyperfoundationinspect' containing 8 vowels alongside 14 consonants. Splitting it apart reveals three words: hyper, foundation, inspect. The median word length lands at seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hyperfoundationinspect.xyz/checker/

Page Load Overview

1.21s
Total Load Time
9.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:33 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15104.21.80.214Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
618.245.60.125Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
6151.101.65.229Fastly · CDNUnited States
AS54113Fastly, Inc.
6185.111.111.157Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
6185.111.111.154Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
6172.67.154.91Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
618.245.60.65Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
6104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6185.111.111.158Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
6104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9915--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D6841BFCEB70599C4D8887CA7F01BFA96C1290B6955D8B84F04CCA5BD7C281FE94A943

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:acCZvsCKNEEEiFO1rcadUQjByQ9lZzIZSchPDKufpxGfPGrq+86q7dXfhR1Fa:azDWsa

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:400166:ARwmWA4EJCKTYmgAOKGCGgaSgwElFYADkkoEABBAgighCKGosCmiEEwiKtuwbAJahDAJVSLbMQY4CLI4iFBMLMTUACBGBTRG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7e8098f8f8f8e0e0
Perceptual Hash:df9f0080d7c28dd3
Difference Hash:d032302111118101
Wavelet Hash:7e80b8f8f8f8e0e0
Color Hash:#e06c6c

Scan History

Scan history not available

Unable to load historical scan data