Is verify-hypernova.info a scam? TrustSniffer's high-risk assessment: 5/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website, titled "Hypernova — The On-Chain Crypto Prop Firm," presents itself to visitors as a cryptocurrency proprietary-trading firm. It is served from a domain whose name pairs a verification-style prefix with the brand-like word "hypernova." Its apparent purpose is to promote an on-chain trading-firm offering, and the site carries no independent confirmation of the operator behind it.

Scam/Impersonation Risk

Confirmed contradictory signals are present, so this is a high-risk assessment. The domain is currently blacklisted: a major security vendor classifies it as malicious, and several further vendors flag it as malicious or suspicious. The hit is on the domain itself, not only on a neighbouring address, and it is decisive. The domain's naming pattern ("verify-" attached to a trading-brand term) is the construction commonly used to make a page look like an official verification or onboarding step. No specific brand impersonation or conflicting legal identity has been confirmed, so the pattern is a concern, not a finding. A cluster of abuse reports also exists against one of the shared edge addresses the site resolves to. They fall on infrastructure used by many other sites, so they cannot be attributed to this operator. They are still retained as a visible negative signal and not discounted. In the sandbox the page showed no outbound network calls, no wallet-connection attempts, no hidden or externally posting forms, no clipboard manipulation and no content cloaking. That reduces the likelihood of active credential or wallet theft on first load, but it does not offset the blacklist, because a clean first load can be changed quickly. Evidence:

• Homepage: the domain is currently blacklisted by external threat detections, with one major security vendor and several others flagging it.
• Domain registration: created 2026-08-24, about 0.17 years (roughly two months) old, via the registrar NameSilo, LLC.
• Web archive: a single snapshot, first and last seen 2026-08-31, in one tracked year, so there is no meaningful history that predates the blacklisting.
• Behavioral sandbox: three successful sessions on the homepage with stable responses and no external requests or wallet prompts.

Regulatory Verification Notes

The evidence provides no licence, registration number or regulator connection that supports the "prop firm" positioning. The identity of the real operator is not independently connected to any named company or person. A trading-firm offering in the crypto sector would ordinarily fall under financial-services or consumer-protection rules, which makes a verifiable legal entity especially relevant here. Registrant details are incomplete in the registration record. This is ownership opacity and an administrative limitation, not an identity contradiction. No third-party broker-review entry matched this site, so there is no external reputational signal on the regulatory side. The only external signals are the threat detections already discussed. Evidence:

• Homepage: the title positions the site as a crypto prop firm, with no confirmed licensed or regulated status.
• Hosting: served from AS54113 (FASTLY - Fastly, Inc., US).
• Transport encryption: TLS certificate issued by YR1 (DV, domain-validated only), valid to 2027-01-21. This confirms an encrypted channel but says nothing about who operates the site.
• Broker reputation lookup: no match found for the site name.

What to Verify Next

Before any engagement, the firm's existence and licensing should be checked directly with the relevant financial regulator or business registry, using the company name obtained independently, not from this site. The official brand domain and social channels should be located through a trusted independent route, then compared with this address to establish whether it is genuine or a lookalike. Support and onboarding contacts should be confirmed through those independent channels. Any "verification" or account-linking request that arrives through this site should be treated as unconfirmed until the brand itself validates it. The blacklist status should be rechecked after a reasonable interval, because a compromise or takedown could change it. Evidence:

• Domain name: the verification-style prefix combined with the brand-like term is the main reason for the independent brand comparison.
• Threat detections: the blacklist applies to this domain now, and the threat-intelligence record may change.
• Sandbox sessions: the observed clean first-load behaviour is a point-in-time observation and not a standing guarantee.

Summary Verdict

Taken together, the evidence supports a clearly cautionary, high-risk posture. Confirmed external threat detections against the domain, its very recent creation and its absence of any meaningful history are decisive and outweigh the encrypted connection and benign first-load behaviour. Legitimacy cannot be inferred, and the operator's identity remains unconfirmed.

Infrastructure Integrity

The site sits behind the Fastly CDN, and all four observed addresses are edge servers in the United States. The origin server was not observable, so hosting cannot be verified independently, and content could be swapped quickly behind the edge without notice. The CDN and a valid certificate are mitigating factors only. They show that standard hosting hygiene is in place but do not establish legitimacy or counter the reputation risk.

Closing Assessment

Interaction should be limited to read-only viewing at most. No login, credential entry, wallet connection, payment or deposit should take place on this domain until the operator is independently established, and nothing should be downloaded from it.

Signals weighed against the site

• AbuseIPDB: 38 reports on hosting IP 185.199.111.153 (GitHub, Inc., Content Delivery Network), 29% confidence. The reports are attributed to shared infrastructure, not specifically to this website.