SafeMode - Analysis: claim.hunt-shoki.com

Captura Visual

Informações de Detecção

http://claim.hunt-shoki.com

Detected Brand

PUMP FUN

Country

International

Confiança

100%

HTTP Status

200

Report ID

211fa82d-c88…

Analyzed

2026-03-01 04:03

Final URL (after redirects)

https://claim.hunt-shoki.com/

Hashes de Conteúdo (Similaridade HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1C422A5F26580702F6157C3C99F266BBD73A651E7E6D6010157FCC789CA8BC82EE0B944
CONTENT ssdeep	192:dCHC440FAAqRZ61bmpKRyp+40rAAqRZ64oGQls+ec:UHs0IRZ61bm7P0eRZ63ls+x

Hashes Visuais (Similaridade de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	d3938cacb0939ea6
VISUAL aHash	7e646c6c60181800
VISUAL dHash	f4ccc9c9cd3270b2
VISUAL wHash	ff7e7c6c04183c18
VISUAL colorHash	31030000600
VISUAL cropResistant	762c99f2c0808183,f4ccc9c9cd3270b2

Análise de Código

Risk Score 92/100

Nível de Ameaça ALTO

⚠️ Phishing Confirmed

🎣 OTP Stealer 🎣 Banking

🔬 Threat Analysis Report

• Ameaça: Phishing
• Alvo: Usuários de criptomoedas
• Método: Falsificação e golpe de airdrop
• Exfil: Desconhecido (provavelmente colhendo informações da carteira se os tokens forem reivindicados)
• Indicadores: Domínio não relacionado, oferta de airdrop, idade curta do domínio, ofuscação
• Risco: Alto

🔒 Obfuscation Detected

unescape

🎯 Kit Endpoints

#blog

📡 API Calls Detected

POST
https://api.binance.com/api/v3/ticker/price?symbol=PUMPUSDT

📊 Detalhamento da Pontuação de Risco

Total Risk Score

90/100

Contributing Factors

Unrelated Domain

The domain name 'claim.hunt-shoki.com' is not associated with the brand 'PUMP FUN'.

Airdrop Offering

The site offers free tokens, a common tactic for phishing.

Domain Age

Relatively new domain increasing suspicion.

Obfuscation Detected

Use of unescape can indicate an attempt to hide malicious code.

🔬 Análise Integral de Ameaças

Tipo de Ameaça

Banking Credential Harvester

Alvo

PUMP FUN users (International)

Método de Ataque

Brand impersonation + obfuscated JavaScript

Canal de Exfiltração

Form submission (backend endpoint not detected - likely JavaScript-based)

Avaliação de Risco

CRITICAL - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

Kit types: OTP Stealer, Banking
2 obfuscation techniques

🏢 Análise de Falsificação de Marca

Impersonated Brand

PUMP FUN

Fake Service

Token airdrop

Fraudulent Claims

⚔️ Metodologia de Ataque

Primary Method: Impersonation

The attacker is impersonating the brand PUMP FUN to lure victims with a fake airdrop offer.

Secondary Method: Wallet Phishing

The 'Claim Tokens' button may lead to a page asking for wallet connection and/or seed phrase, resulting in funds being stolen.

🌐 Indicadores de Compromisso de Infraestrutura

Domain Information

Domínio

claim.hunt-shoki.com

Registered

2023-11-15

Registrar

Namecheap

Estado

ACTIVE

🤖 AI-Extracted Threat Intelligence

Similar Websites

Pages with identical visual appearance (based on perceptual hash)

Desconhecido

https://netflixtdv.com/