# Phishing sites impersonating Foundation

PhishDestroy has recorded 98 phishing domains impersonating Foundation since 2025-03-18, 1 of them in the last 30 days. The most used registrars are NiceNIC and PublicDomainRegistry.com; the most common TLDs are .com and .xyz. Open Foundation only from its official app or a saved bookmark.

98Domains, all time

1Last 30 days

31Online at last check

21Confirmed takedowns

## New domains in the last 90 days

Foundation phishing domains detected per day: 5 from 2026-07-25 to 2026-10-22; peak 1.

## How to tell a fake Foundation site

Words most often added to the brand in reported domains: hyperliquid, claim, avantisfi, portal, claims, succinct, airdrop, prod, cdn, jito.
- Type the address yourself or use a bookmark; phishing links for Foundation arrive through ads, search results, direct messages and fake support accounts.
- Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
- Foundation will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets.

Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check).

## Latest Foundation phishing domains

The 50 most recently detected domains impersonating Foundation
Domain | First detected | Status at last check | Registrar | 
[bfycozy.shop](https://phishdestroy.io/domain/bfycozy.shop/) | 2026-10-16 | Online | Dynadot | 
[admin.foundation.byrds.dev](https://phishdestroy.io/domain/admin.foundation.byrds.dev/) | 2026-09-08 | Online | OVH | 
[adi-foundation.info](https://phishdestroy.io/domain/adi-foundation.info/) | 2026-08-10 | Online | NICENIC | 
[mt0508.6868dc.com](https://phishdestroy.io/domain/mt0508.6868dc.com/) | 2026-08-07 | Online | GoDaddy.com | 
[pay.ffoundation.io](https://phishdestroy.io/domain/pay.ffoundation.io/) | 2026-08-02 | Online | GoDaddy.com | 
[claim.gradient-foundation.xyz](https://phishdestroy.io/domain/claim.gradient-foundation.xyz/) | 2026-06-15 | Online | NameSilo | 
[bonus-based.com](https://phishdestroy.io/domain/bonus-based.com/) | 2026-05-11 | Online | PublicDomainRegistry.com | 
[182233.com](https://phishdestroy.io/domain/182233.com/) | 2026-05-09 | Online | GoDaddy.com | 
[learns-en-ledgr.pages.dev](https://phishdestroy.io/domain/learns-en-ledgr.pages.dev/) | 2026-04-29 | Online | Cloudflare | 
[foundation.avantisfi.fun](https://phishdestroy.io/domain/foundation.avantisfi.fun/) | 2026-03-15 | Offline | PublicDomainRegistry.com | 
[cryptio.top](https://phishdestroy.io/domain/cryptio.top/) | 2026-02-26 | Offline | 耐思尼克国际集团有限公司 | 
[zerofoudationclaim.pages.dev](https://phishdestroy.io/domain/zerofoudationclaim.pages.dev/) | 2026-02-26 | Offline | Cloudflare | 
[distributions-hyperliquid.xyz](https://phishdestroy.io/domain/distributions-hyperliquid.xyz/) | 2026-02-26 | Offline | PublicDomainRegistry.com | 
[foundation-pendle.com](https://phishdestroy.io/domain/foundation-pendle.com/) | 2026-02-26 | Offline | Web Commerce Communications dba WebNic.c | 
[claim.succnicnt.foundation](https://phishdestroy.io/domain/claim.succnicnt.foundation/) | 2026-02-26 | Offline | — | 
[mefoundnation.co](https://phishdestroy.io/domain/mefoundnation.co/) | 2026-02-26 | Offline | — | 
[meboxchest.com](https://phishdestroy.io/domain/meboxchest.com/) | 2026-02-26 | Offline | — | 
[chestme.com](https://phishdestroy.io/domain/chestme.com/) | 2026-02-26 | Online | DropCatch.com 544 | 
[adi-foundation.com](https://phishdestroy.io/domain/adi-foundation.com/) | 2026-02-26 | Taken down | Cloudflare | 
[pepessolana.pages.dev](https://phishdestroy.io/domain/pepessolana.pages.dev/) | 2026-02-26 | Offline | Cloudflare | 
[claim.succinctz.foundation](https://phishdestroy.io/domain/claim.succinctz.foundation/) | 2026-02-26 | Offline | — | 
[foundation.openedens.network](https://phishdestroy.io/domain/foundation.openedens.network/) | 2026-02-26 | Taken down | PublicDomainRegistry.com | 
[succinct-foundation.network](https://phishdestroy.io/domain/succinct-foundation.network/) | 2026-02-26 | Offline | NameSilo | 
[mint.hypurrnfts.org](https://phishdestroy.io/domain/mint.hypurrnfts.org/) | 2026-02-26 | Offline | Web Commerce Communications dba WebNic.c | 
[distribution-hype.net](https://phishdestroy.io/domain/distribution-hype.net/) | 2026-02-26 | Offline | PublicDomainRegistry.com | 
[nodefoundation.site](https://phishdestroy.io/domain/nodefoundation.site/) | 2026-02-26 | Offline | — | 
[eligible.fabricfoundation.live](https://phishdestroy.io/domain/eligible.fabricfoundation.live/) | 2026-02-24 | Offline | — | 
[mgxalliance.com](https://phishdestroy.io/domain/mgxalliance.com/) | 2026-02-22 | Online | Internet Domain Service BS | 
[common-common.com](https://phishdestroy.io/domain/common-common.com/) | 2026-02-16 | Offline | NiceNIC | 
[xaman-foundation.app](https://phishdestroy.io/domain/xaman-foundation.app/) | 2026-02-12 | Online | NiceNIC | 
[superformfonudaiton.org](https://phishdestroy.io/domain/superformfonudaiton.org/) | 2026-02-10 | Unknown | NiceNIC | 
[phantom-foundation-bqk.pages.dev](https://phishdestroy.io/domain/phantom-foundation-bqk.pages.dev/) | 2026-02-09 | Offline | Cloudflare | 
[plume-foundation-landing.pages.dev](https://phishdestroy.io/domain/plume-foundation-landing.pages.dev/) | 2026-02-07 | Taken down | Cloudflare | 
[gitcon.co](https://phishdestroy.io/domain/gitcon.co/) | 2026-02-07 | Offline | PublicDomainRegistry.com | 
[hyperliquidsdsfnd.com](https://phishdestroy.io/domain/hyperliquidsdsfnd.com/) | 2026-02-03 | Offline | Web Commerce Communications | 
[solgasfoundation.org](https://phishdestroy.io/domain/solgasfoundation.org/) | 2026-01-30 | Taken down | Metaregistrar | 
[crydex.solplanet.cc](https://phishdestroy.io/domain/crydex.solplanet.cc/) | 2026-01-22 | Unknown | NiceNIC | 
[yzy-hyperliquid.xyz](https://phishdestroy.io/domain/yzy-hyperliquid.xyz/) | 2026-01-22 | Offline | Registrar.eu | 
[collect-foundation.com](https://phishdestroy.io/domain/collect-foundation.com/) | 2026-01-06 | Taken down | NiceNIC | 
[hyperliquidlist.xyz](https://phishdestroy.io/domain/hyperliquidlist.xyz/) | 2026-01-04 | Taken down | Name.com | 
[claim.espresso-foundation.com](https://phishdestroy.io/domain/claim.espresso-foundation.com/) | 2025-12-31 | Unknown | NiceNIC | 
[solvfinances.com](https://phishdestroy.io/domain/solvfinances.com/) | 2025-12-31 | Unknown | NiceNIC | 
[claim-sol-carnival.netlify.app](https://phishdestroy.io/domain/claim-sol-carnival.netlify.app/) | 2025-12-29 | Taken down | Netlify | 
[claim-espressofoundation.org](https://phishdestroy.io/domain/claim-espressofoundation.org/) | 2025-12-28 | Taken down | Cloudflare | 
[espresso-foundation.com](https://phishdestroy.io/domain/espresso-foundation.com/) | 2025-12-23 | Offline | NiceNIC | 
[espresso-foundation.xyz](https://phishdestroy.io/domain/espresso-foundation.xyz/) | 2025-12-23 | Offline | PublicDomainRegistry.com | 
[fir10.209494.com](https://phishdestroy.io/domain/fir10.209494.com/) | 2025-12-23 | Taken down | Gname.com | 
[adida.foundation](https://phishdestroy.io/domain/adida.foundation/) | 2025-12-20 | Taken down | GoDaddy.com | 
[jito.restaking.network](https://phishdestroy.io/domain/jito.restaking.network/) | 2025-12-20 | Offline | ENOM | 
[jito.promo](https://phishdestroy.io/domain/jito.promo/) | 2025-12-17 | Offline | Unstoppable Domains | 

[All 98 Foundation reports](https://phishdestroy.io/domain/?brand=Foundation)

## Where they are registered and hosted

### Registrars

- [NiceNIC](https://phishdestroy.io/registrar/nicenic/)21
- [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)15
- Cloudflare12
- [Web Commerce Communications](https://phishdestroy.io/registrar/webnic/)9
- [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)4
- [NameSilo](https://phishdestroy.io/registrar/namesilo/)3
- N/A2
- [Registrar.eu](https://phishdestroy.io/registrar/registrar-eu/)2

### Top-level domains

- [.com](https://phishdestroy.io/tld/com/)24
- [.xyz](https://phishdestroy.io/tld/xyz/)11
- [.org](https://phishdestroy.io/tld/org/)9
- [.foundation](https://phishdestroy.io/tld/foundation/)8
- [.dev](https://phishdestroy.io/tld/dev/)6
- [.network](https://phishdestroy.io/tld/network/)5
- [.cloud](https://phishdestroy.io/tld/cloud/)5
- [.top](https://phishdestroy.io/tld/top/)3

### Hosting networks

- CLOUDFLARENET, US61
- CLOUDFLARENET - Cloudflare, Inc., US9
- Cloudflare, Inc.9
- AMAZON-02, US3
- Partner-Hosting-LTD Partner Hosting LTD, GB2
- AS-COLOCROSSING, US2
- DREAMHOST-AS, US2
- SS-ASH, US1

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [Homoglyph](https://phishdestroy.io/glossary/homoglyph/)
- [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/)
- [Wallet drainer](https://phishdestroy.io/glossary/wallet-drainer/)
- [Seed phrase phishing](https://phishdestroy.io/glossary/seed-phrase-phishing/)
- [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker)
- [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator)
- [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action)
- [All impersonated brands](https://phishdestroy.io/brand/)

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Foundation; share of all PhishDestroy reports: 0.04%.

Canonical: https://phishdestroy.io/brand/foundation/