Verdict
This assessment found strong scam indicators. Do not pay, sign in, or share personal details with this site.
hachikoinufinance.vercel.app shows high-risk / scam indicators.
| What this site appears to be | A $HACHI token rewards claim page on EVM that asks visitors to connect a wallet for an eligibility scan, promises larger allocations through optional quests, and displays a countdown to a claim deadline. The page shows an 'AUDITED' badge and a 1,623,223 allocation figure without linking to any audit report, team identity, or contact details. |
|---|
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 1 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 85 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
- The operator behind the site could not be independently connected to a real-world brand or person.
Full analysis
Overview
A single-page token-claim site hosted on a free Vercel subdomain, branded "$HACHI — Claim Rewards." It presents an "EVM mainnet" rewards portal that shows a "Secure Allocation Of 1,623,223 $HACHI," a "Phase 01 / 03" label, and a "CLAIM OPEN" status. Visitors are told to "Verify wallet" by connecting any supported wallet, then to "Join the Hunt" through optional quests that apply multipliers. The apparent purpose is to draw wallet holders into an airdrop-style claim flow. The page discloses no sponsor, revenue source, or fee structure.
Scam/Impersonation Risk
Contradictory signals are present. An external threat-intelligence aggregation currently flags the site, which makes this a confirmed blacklist-level warning. No brand impersonation and no conflicting legal identities were observed. The risk therefore rests on the blacklist hit and on the page's own mechanics, which follow a familiar wallet-drainer lure pattern. The page presents a large named allocation, a live countdown ("Claim ends in" about two hours), and a bonus for "early contributors" that pushes visitors to act quickly. It also displays an "AUDITED" badge that links to no audit report, auditor, or team. It states that eligibility is computed by scanning on-chain activity with "No signatures needed," which is an unverifiable assurance placed exactly where wallet connection is requested. The quest-multiplier mechanic gives visitors a reason to keep engaging after they connect. The wallet-connection step carries the potential for asset loss. Sandbox runs recorded no wallet-draining behavior, no clipboard hijacking, no cloaking, and no suspicious network destinations. The absence of those behaviors does not offset a blacklisted, unattributed claim page. A large volume of abuse reports exists against the shared Vercel IP address serving the site. These reports apply to shared platform infrastructure, are discounted, and are not evidence against this site specifically. Evidence:
- Homepage: shows a 1,623,223 $HACHI allocation, a "CLAIM OPEN" status, and a "Claim ends in" countdown of 0d 2h 22m 25s at capture.
- Homepage: shows an "AUDITED" badge with no linked report, auditor name, or team.
- Homepage: "Verify wallet" and "Join the Hunt" steps; the "No signatures needed" claim is not substantiated anywhere on the page.
- Reputation checks: an external blacklist hit is recorded (1 malicious and 1 suspicious detection from security vendors). 85 abuse reports target the shared Vercel IP 64.29.17.67 and are discounted as shared-infrastructure noise.
Regulatory Verification Notes
The single page captured carries no legal entity name, registration number, license, terms page, privacy policy, or physical address. It names no team, so the operator is unverified. The business model shows no disclosed value flow: nothing explains who funds the allocation or what the operator gains from connected wallets. For a project asking visitors to engage with their crypto assets, that disclosure gap is significant. No third-party regulatory or broker record matched this site, and no license is claimed. The absence of regulatory standing is a gap in verification. It does not by itself prove misconduct. Evidence:
- Homepage: no company name, jurisdiction, license, or contact channel appears anywhere on the page.
- Homepage: no terms, privacy, or risk-disclosure links are present, and the page's link graph is empty.
- Hosting: served from AS16509 (AMAZON-02 – Amazon.com, Inc., US) on a vercel.app subdomain.
- Transport encryption: TLS certificate issued by WR1 (DV, domain validation only), valid to 2026-11-27 with 39 days remaining. This confirms encryption only, not operator identity.
What to Verify Next
Any claim that a $HACHI program exists should be confirmed through the token project's official channels, reached independently of this page, such as a known website, verified social accounts, or a contract address published by a source the reader already trusts. The "AUDITED" assertion should be checked directly with a named audit firm. Any report should be matched to the actual contract and be signed by the firm. Eligibility and allocation figures should also be confirmed there. Any stated launch phases and claim deadlines should be compared with the project's official announcements. The countdown and phase labels on this page should be treated as unconfirmed until then. Evidence:
- Homepage: names no team, auditor, or contract address that could be checked against an official source.
- Homepage: the countdown and "Phase 01 / 03" labels are the only timing claims, with no supporting announcement.
- Homepage: no official social or community links are given to cross-reference.
Summary Verdict
The available evidence supports a high-risk assessment. A confirmed threat-intelligence warning combines with a high-stakes wallet interaction presented without verifiable accountability. The site cannot be treated as a legitimate or established project on this evidence, and the operator's real-world identity remains unverified.
Infrastructure Integrity
The site resolves through Cloudflare and Vercel edge servers, with a valid TLS certificate. No origin server was observed. This protective infrastructure is a mitigating factor only. It does not offset the external threat detection or the content-level risks, and it says nothing about the operator's legitimacy.
Closing Assessment
Viewing the page without interacting is the only low-exposure use. Wallets should not be connected, signatures or transactions should not be approved, and credentials or funds should not be provided. Anyone who has already connected a wallet should review and revoke token approvals and consider moving assets to a fresh wallet.
Written analysis generated 2026-10-19 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
2 findings contributed to this verdict, raised by external reputation, page content.
01 External reputation
- A small number of malware engines flagged this domain. On its own this is a weak signal.External reputation
rule:EXT_BLACKLIST_MEDIUM
02 Page content
- The page shows few of the signs expected from a trustworthy operator.Page content
rule:PAGE_TRUST_QUALITY_LOW - The page content shows three or more warning signs that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_STRONG - The review of the page content rated it moderate risk.Page content
rule:PAGE_RISK_MED - The page content shows at least one warning sign that deceptive sites commonly use.Page content
rule:PAGE_RED_FLAGS_SOME - The browser raised a warning while loading the page.Page content
rule:PAGE_BROWSER_FLAGS_SUSPICIOUS
Signals weighed against the site
- AbuseIPDB: 85 reports on hosting IP 64.29.17.67 (Vercel, Inc, Content Delivery Network), 0% confidence. The reports are attributed to shared infrastructure, not specifically to this website.
Identity verification
| Status | UNVERIFIED |
|---|---|
| Identity score | 30/100 |
| Identity verification confidence | 50% |
- No on-site identity signals detected
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of hachikoinufinance.vercel.app.
- The request stayed on hachikoinufinance.vercel.app. It was not redirected to another domain. Clear
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | Not available |
| Country | Not available |
| Server IP | 64.29.17.67 |
| Name servers | Not available |
| CDN / edge network | Lookup incomplete |
| SSL issuer | WR1 |
| SSL expiry | 2026-11-27 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | Not available |
| Reputation | VirusTotal: 1 flagged | AbuseIPDB: 0% confidence, 85 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about hachikoinufinance.vercel.app at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.