claim[.]hyperlnaene[.]foundation

This domain, claim.hyperlnaene.foundation, was observed hosting a page titled “Hyperlane – Token claim” and is attributed to a crypto‑scam campaign that pretends to be associated with Binance. The domain was registered on 21 February 2026 and is currently taken offline. DNS resolution points to 104.21.16.1, an address owned by Cloudflare (AS13335) located in the United States. The SSL certificate presented is identified as “WE1”, which does not correspond to a trusted certificate authority.

Reputation scoring from Gridinsoft assigns a zero‑point trust rating (0/100). Independent blocklists, including PhishDestroy and ScamSniffer, have listed the domain, and it appears on two additional security blocklists. VirusTotal analysis shows that 7 of 93 scanning engines flagged the domain as malicious, reinforcing the suspicion of phishing activity. The site is classified as a “Crypto Scam” and explicitly impersonates the Binance brand.

Available evidence confirms the domain’s creation date, hosting details, SSL fingerprint, and blocklist presence, but the content of the page beyond the title has not been captured, leaving the exact phishing mechanics unknown. No public WHOIS anomalies or registrar information are provided, and no further infrastructure such as command‑and‑control endpoints has been identified. Defenders should block any network traffic to claim.hyperlnaene.foundation, add the IP 104.21.16.1 to deny‑list rules where feasible, and monitor for similar Cloudflare‑hosted domains that use the “WE1” certificate pattern. Security teams should also update brand‑protection feeds for Binance to include this indicator and continue to consult threat‑intel platforms for any emerging variants that reuse the same page title or host under the same ASN.