hyperfoundatsion[.]org

The domain hyperfoundatsion.org is associated with a brand impersonation phishing scam targeting users of Hyperliquid, a cryptocurrency platform. This site was designed to deceive visitors by mimicking Hyperliquid's branding and featured the page title 'Hyperliquid Affiliate Program.' As of now, hyperfoundatsion.org has been taken offline, but when active, it posed an elevated risk for potential victims searching for information about Hyperliquid or its affiliate programs and may have been used to steal sensitive data or assets.

Technical analysis shows that hyperfoundatsion.org was registered through NameSilo, LLC on June 23, 2025, and resolved to the IP address 172.67.161.88, hosted in the US under AS13335 Cloudflare, Inc. The site used an SSL certificate issued by WE1. Security checks indicate that 1 of 95 vendors on VirusTotal, specifically Gridinsoft, flagged the domain as malicious, and it appears on one security blocklist (PhishDestroy). The Gridinsoft trust score for this domain is 0/100, while Scamadviser gives it a trust score of 36/100. Google Safe Browsing has not flagged the domain.

Anyone who interacted with hyperfoundatsion.org, especially in connection with cryptocurrency activities, should take immediate steps to secure their accounts. This includes changing passwords, enabling two-factor authentication, and monitoring for unauthorized transactions. If any wallet credentials were entered, move funds to a new wallet and consider revoking token approvals. Suspicious activity involving hyperfoundatsion.org can be reported to relevant security organizations or blocklist maintainers for further investigation.