hyperfoundation[.]xyz-connectwallet-v2[.]com

This domain is flagged as a high-risk crypto drainer. Registered on February 21, 2026, through MAT BAO CORPORATION, it resolves to IP 172.67.197.158 (US, AS13335 Cloudflare, Inc.) and uses Cloudflare nameservers. The page title is '401 Authorization Required' and returns HTTP status 403, indicating the site may restrict access or is behind authentication. SSL certificate is issued by Google Trust Services (WE1). Technologies detected include Cloudflare and HTTP/3. VirusTotal shows 6 of 93 security vendors flagging the domain, and it appears on 2 security blocklists. Gridinsoft trust score is 0/100. The domain is actively blocked by PhishDestroy and ScamSniffer. Analysis confirms the domain is still active but currently returns an authorization error, which may be a tactic to evade automated scanning. Defenders should block this domain at the network level, add it to blocklists, and monitor for any changes in access patterns or redirects. The exact phishing content has not been observed due to the 403 status, but the infrastructure and blocklist presence strongly indicate malicious intent targeting cryptocurrency wallets. No further details about the specific brand impersonated are available from the provided data.