Is checker-hyperfoundation.app a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website presents itself as a "Pre-Trial Claims Portal" and an official notice delivery service for the State of New York. It describes a process in which a claimant's representative registers a claim, a message with a private link goes to the respondent, and the respondent must record a response within a fixed window before the matter is referred for court processing. The page names Sony Music Entertainment as the rights holder behind the claim. It shows no fee, login or payment request, so its apparent purpose is to deliver legal-style demand notices to individuals. No legitimate operator or commercial purpose is disclosed.

Scam/Impersonation Risk

Contradictory signals are present, and the posture is cautionary. The domain is currently blacklisted by external reputation sources. Several independent security engines flag it as malicious or suspicious, including more than one that is widely regarded as authoritative. The domain was registered only weeks before the analysis, so it has no reputation history that could explain or offset these detections. No conflicting legal entities appear on the site, and no brand impersonation was formally detected. However, the homepage invokes a major music rights holder and the authority of a New York court process, with no verifiable backing for either. The claimant name is malformed, with a stray asterisk in the corporate suffix. No court, case reference or correspondence address is given, and the address field is blank. The appeal instructions are truncated mid-sentence. The domain name has no visible connection to the named claimant. The "response window" framing, together with the statement that notices can be reached only through a link in a message, matches the profile of a fake legal-threat lure. Such lures pressure recipients to act on a notice they cannot verify elsewhere. The page does state that it never requests passwords, one-time codes, payment details or software installation. That is the one mitigating feature, but a recipient cannot test the claim, and a landing page of this kind is easy to alter later. Behavioural testing observed no external form posts, hidden forms, cloaking or clipboard activity. Evidence:

• Homepage: presents a "Pre-Trial Claims Portal" for the "United States of America — State of New York" and names Sony Music Entertainment (rendered with a malformed "*LCC" suffix) as the claimant, with no court, case reference or correspondence address.
• Homepage: the appeal instructions end mid-sentence, and the notice workflow relies on a private link and a fixed response deadline.
• Domain registration: registered 2026-09-28 (~22 days old, about 0.06 years), with the registration expiring 2027-09-28.
• Web archive: 3 snapshots from 2026-09-28 to 2026-10-11 (about 1 year tracked), which confirms only a very recent footprint.

Regulatory Verification Notes

The site discloses no operating entity, legal identity, licence, law firm, court or registration number. For a service claiming to issue notices in a judicial process, this is a material content gap on the page itself. The homepage offers no contact route and no reference system for locating a claim independently. No regulated status was established through third parties, and no broker-reputation match was found. The site's transport encryption is a valid domain-validated certificate, which shows only that the connection is encrypted. It says nothing about who runs the site or whether the claim is genuine. The registrar is a commercial provider, NICENIC International Group Co., Limited. No evidence ties the registration to a known claimant or legal practice. Evidence:

• Homepage: no named operator, firm, court, licence or registration identifier appears, and no case-lookup mechanism is offered.
• Transport layer: TLS certificate issued by YE2 (domain-validated, DV), valid to 2026-12-27.
• Hosting: served from AS13335 (Cloudflare, Inc., US).
• Registration: domain registered through NICENIC International Group Co., Limited.

What to Verify Next

Any recipient of a message pointing to this portal should treat the notice as unconfirmed until the claimant confirms it independently. The claimant's official legal or enforcement department should be contacted through a channel obtained from its own corporate website, not from the message or the portal. If a court proceeding is claimed, the existence of a case should be checked with the relevant New York court clerk, using a court-published contact route. Legal counsel should assess any deadline stated in the notice before any response is made. Any message containing the link should be reported to the claimant's anti-fraud channel and, where relevant, to the recipient's security team. The official support and contact channels of the claimed rights holder should be confirmed through an offline or independently sourced route. Evidence:

• Homepage: the portal states that notices are reachable only through the link in a message, so the claim cannot be tested from the page.
• Homepage: the page publishes no case reference or correspondence address that could be used for cross-checking.
• Homepage: the response-window language implies a deadline that cannot be validated on the site.

Summary Verdict

The overall posture is high-risk. Confirmed external threat detections and a very recent, unestablished footprint converge with a legal-notice presentation that cannot be verified. The real-world operator remains unidentified, and the evidence does not support treating the site as legitimate. The absence of a login or payment form does not offset this reputational and provenance failure.

Infrastructure Integrity

The site is served through Cloudflare, a mainstream CDN and WAF. All four observed addresses are edge nodes in US address space, and the origin server was not observable. This is a mitigating factor for availability and basic attack resilience only. It does not establish legitimacy, and it cannot offset the external threat detections. Edge-only visibility also prevents independent verification of the underlying host and can mask rapid content changes.

Closing Assessment

The portal should be treated as read-only at most. No links should be followed from messages that cite it, and no credentials, codes, personal data, payments or responses should be submitted. Any deadline it asserts should be handled only through independently verified legal or claimant channels.