Is hyperfoundation-reward.xyz a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a single-page "Pre-Trial Claims Portal" that styles itself an official notice-delivery service for the State of New York. It says it acts for a rights holder, Sony Music Entertainment. It tells visitors that claims are delivered only through private links sent in notification messages, that a fixed response window applies, and that unanswered matters are "referred for court processing". No fee is stated, and the purpose appears to be getting recipients to engage with a legal-threat workflow, not to sell a product.

Scam/Impersonation Risk

Hard contradictory signals are present. Several major security vendors currently flag the domain as malicious, and it also appears on an external blacklist. This is a confirmed adverse reputation finding, not a soft warning. The content fits that pattern. The homepage uses legal-threat urgency language and invokes a named global entertainment company as claimant. It gives no court, case registry, case lookup, legal entity or correspondence address through which that claim can be checked. Delivery is "private link only", which suits targeted lures because a recipient cannot cross-check the notice against any public record. The text is also incoherent in places. The reassurance that the portal never asks for passwords, one-time codes or payment details cuts off mid-sentence ("To file an appeal, you must use the a"). The page says "the reverse direct answer is impossible. Only the appeal", which reads as machine-assembled or hastily edited pre-text. The domain name is built around "hyperfoundation" and "reward", which has no logical connection to a legal-claims service or to the named rights holder. That mismatch is typical of throwaway infrastructure. No brand impersonation was confirmed, and no login form, hidden form, wallet interaction or external data submission was observed. The risk therefore lies in the unverifiable authority claimed on the page and the adverse reputation, not in a captured credential flow. Evidence:

• Homepage: presents "Official Notice Delivery Service" for a named rights holder, with no verifiable court, case number, entity name or mailing address.
• Homepage: the self-description in the appeal instructions is truncated mid-sentence, and the wording is garbled elsewhere.
• Domain registered 2026-09-28 (~22 days old), a very young domain, and a registered name unrelated to the legal-notice theme.
• Web archive: only 2 snapshots, spanning 2026-09-28 to 2026-09-29 (1 year tracked), so there is no prior history behind the claim of official status.

Regulatory Verification Notes

The site claims official, court-adjacent status but discloses no licensing, registration or legal-entity information. It does not name the entity operating the portal or the claimant's representative who supposedly registered the claims. It gives no jurisdictional detail beyond "United States of America — State of New York", and it names no court, docket system or bar-admitted counsel. For a service that asks people to respond to legal claims within a fixed window, these omissions are material. Ownership details are also opaque, and the operator cannot be connected to any real-world person or organisation. No third-party regulatory or broker database entry exists for the site, so there is no external corroboration of any claimed status. The pages make no claim of regulation, and the site's actual legal posture cannot be established from what it publishes. Evidence:

• Homepage: no license, registration number, company name, court reference or correspondence address is published.
• Registrar of record is NICENIC INTERNATIONAL GROUP CO., LIMITED; the domain expires 2027-09-28.
• TLS certificate issued by YE1 (DV, domain validation only), valid to 2026-12-27, so no organisation identity is attested by the certificate.
• Served from AS13335 (Cloudflare, Inc., US).

What to Verify Next

Any recipient of a message pointing to this portal should treat the notice as unconfirmed until it is validated outside the portal. They should contact the named rights holder through contact details taken independently from that company's official public channels, and ask whether it has issued any pre-trial claim through this domain. Any claimed New York proceeding should be checked directly with the relevant court clerk, using court contact details found independently. The sender of the notification message should be examined on its own merits, without following its link, and the official support channels of the party it purports to represent should be confirmed through an offline or independently sourced route. Where the notice concerns a real dispute, qualified legal counsel should be consulted before any response is recorded. Evidence:

• Homepage: states that notices are reachable only through private links, so the claim cannot be looked up on the site itself.
• Homepage: names a specific rights holder as claimant, so a direct confirmation request to that company is possible.
• Homepage: cites a New York jurisdiction, so any court reference can be validated with the court clerk.

Summary Verdict

The site sits at the lowest end of the trust spectrum and carries an elevated risk posture. Adverse third-party reputation findings are decisive. They are reinforced by a very young domain, an unverifiable legal-authority claim and incoherent, threat-driven content. Its technically orderly presentation (valid encryption, no hostile scripts or external data flows observed) does not offset these findings.

Infrastructure Integrity

The domain resolves entirely to Cloudflare edge addresses, and the origin server was not observable. This hides the real hosting location and also means the content could be swapped without visible change at the network layer. Cloudflare is widely used by legitimate and illegitimate sites alike, so the protection is a mitigating factor only and offers no evidence of legitimacy here. An unconfirmed heuristic notes the sparse subdomain footprint typical of a newly created domain, which is consistent with the young registration but not independently confirmed.

Closing Assessment

Interaction with this site should be limited to passive viewing at most. No link should be opened from an unsolicited message that points to it, no response or appeal should be recorded on it, and no credentials, codes, personal data or payments should be supplied. Anyone who has already followed a private link from it should treat the accounts and devices involved as potentially exposed and review them accordingly.