hyperlend-claim[.]app

Analysis of the domain hyperlend-claim.app indicates it is an active crypto drainer scam, first registered on February 21, 2026, through registrar NiceNIC International Group Co., Limited. The domain is currently hosted on Cloudflare infrastructure (AS13335) and resolves to IP 172.67.173.85, located in the US. Nameservers ridge.ns.cloudflare.com and thea.ns.cloudflare.com further confirm Cloudflare's involvement in its hosting. The site presents an HTTP 403 status, suggesting access restrictions or protective measures to evade automated scans, while the page title 'Nur einen Moment…' may indicate a placeholder or intermediate loading page. The domain appears on four security blocklists, including PhishDestroy, MetaMask, ScamSniffer, and SEAL, which classify it as a crypto-related scam.

Gridinsoft assigns it a trust score of 0/100, reinforcing its high-risk status. SSL certification is provided by Google Trust Services (WE1), a common practice among both legitimate and malicious sites to avoid browser warnings. Technologies detected include HSTS, Cloudflare Browser Insights, and HTTP/3, typical of modern web infrastructure but not inherently indicative of malicious intent. As of July 24, 2026, the domain remains active, with no evidence of takedown or remediation.

VirusTotal reports flagging by 4 of 93 security vendors, though this does not represent a comprehensive detection rate. The exact content and targeting mechanisms of the site are not yet analysed, but its classification as a crypto drainer suggests it may attempt to trick users into connecting wallets or authorising transactions, leading to unauthorised fund transfers. Defenders should block the domain at the network level, monitor for related phishing campaigns, and alert users to the risks of interacting with crypto-related claims or giveaways from unfamiliar sources.