SafeMode - Analysis: claim.hunt-shoki.com

Captura Visual

Información de Detección

http://claim.hunt-shoki.com

Detected Brand

PUMP FUN

Country

International

Confianza

100%

HTTP Status

200

Report ID

211fa82d-c88…

Analyzed

2026-03-01 04:03

Final URL (after redirects)

https://claim.hunt-shoki.com/

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1C422A5F26580702F6157C3C99F266BBD73A651E7E6D6010157FCC789CA8BC82EE0B944
CONTENT ssdeep	192:dCHC440FAAqRZ61bmpKRyp+40rAAqRZ64oGQls+ec:UHs0IRZ61bm7P0eRZ63ls+x

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	d3938cacb0939ea6
VISUAL aHash	7e646c6c60181800
VISUAL dHash	f4ccc9c9cd3270b2
VISUAL wHash	ff7e7c6c04183c18
VISUAL colorHash	31030000600
VISUAL cropResistant	762c99f2c0808183,f4ccc9c9cd3270b2

Análisis de Código

Risk Score 92/100

Nivel de Amenaza ALTO

⚠️ Phishing Confirmed

🎣 OTP Stealer 🎣 Banking

🔬 Threat Analysis Report

• Amenaza: Phishing
• Objetivo: Usuarios de criptomonedas
• Método: Suplantación y estafa de airdrop
• Exfil: Desconocido (probablemente recolectando información de billetera si se reclaman tokens)
• Indicadores: Dominio no relacionado, oferta de airdrop, corta edad del dominio, ofuscación
• Riesgo: Alto

🔒 Obfuscation Detected

unescape

🎯 Kit Endpoints

#blog

📡 API Calls Detected

POST
https://api.binance.com/api/v3/ticker/price?symbol=PUMPUSDT

📊 Desglose de Puntuación de Riesgo

Total Risk Score

90/100

Contributing Factors

Unrelated Domain

The domain name 'claim.hunt-shoki.com' is not associated with the brand 'PUMP FUN'.

Airdrop Offering

The site offers free tokens, a common tactic for phishing.

Domain Age

Relatively new domain increasing suspicion.

Obfuscation Detected

Use of unescape can indicate an attempt to hide malicious code.

🔬 Análisis Integral de Amenazas

Tipo de Amenaza

Banking Credential Harvester

Objetivo

PUMP FUN users (International)

Método de Ataque

Brand impersonation + obfuscated JavaScript

Canal de Exfiltración

Form submission (backend endpoint not detected - likely JavaScript-based)

Evaluación de Riesgo

CRITICAL - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

Kit types: OTP Stealer, Banking
2 obfuscation techniques

🏢 Análisis de Suplantación de Marca

Impersonated Brand

PUMP FUN

Fake Service

Token airdrop

Fraudulent Claims

⚔️ Metodología de Ataque

Primary Method: Impersonation

The attacker is impersonating the brand PUMP FUN to lure victims with a fake airdrop offer.

Secondary Method: Wallet Phishing

The 'Claim Tokens' button may lead to a page asking for wallet connection and/or seed phrase, resulting in funds being stolen.

🌐 Indicadores de Compromiso de Infraestructura

Domain Information

Dominio

claim.hunt-shoki.com

Registered

2023-11-15

Registrar

Namecheap

Estado

ACTIVE

🤖 AI-Extracted Threat Intelligence

Similar Websites

Pages with identical visual appearance (based on perceptual hash)

Desconocido

https://netflixtdv.com/