SafeMode - Analysis: claimmemesolana.firebaseapp.com

Visual Capture

Screenshot of claimmemesolana.firebaseapp.com

Detection Info

https://claimmemesolana.firebaseapp.com/

Detected Brand

BlockchainClaim

Country

International

Confidence

95%

HTTP Status

200

Report ID

2df76ebd-bf8…

Analyzed

2026-02-25 23:24

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T178F1316094046B371187D3E9637D2B8BFBE18245C667530E96F6D3A80FEEE08DC22D59
CONTENT ssdeep	192:vcqjA/444WMpLo0QwczadEIj+bGe2ExfU:vbO444WnoIaj8xfU

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	c7693c23c79898e3
VISUAL aHash	0100bc3c742c0e1e
VISUAL dHash	b3283961c9e83ca4
VISUAL wHash	0180fcbc7c3e1e3e
VISUAL colorHash	39007000000
VISUAL cropResistant	26cccce4e6c283a2,71ccc4f0b696e071,71ccc4f0b296e071,a2a2a08696a8a2a2,b3283961c9e83ca4

Code Analysis

Risk Score 3/100

Threat Level ALTO

⚠️ Phishing Confirmed

🔥 Firebase Backend

🔬 Threat Analysis Report

• Threat: Phishing
• Target: Cryptocurrency users
• Method: Impersonation via free hosting.
• Exfil: Firebase endpoint (potential). Form submissions will likely harvest wallet credentials.
• Indicators: Free hosting, brand logo, form submission.
• Risk: High

🔒 Obfuscation Detected

js_packer

📡 API Calls Detected

GET

☁️ Cloud Backend

Firebase: claimmemesolana.firebaseapp.com

📊 Risk Score Breakdown

Total Risk Score

90/100

Contributing Factors

Free Hosting

The site uses free hosting, a common indicator of phishing.

Brand Impersonation

The site uses a brand logo and name to impersonate a legitimate service.

JavaScript Obfuscation

Javascript Obfuscation detected can be used to hide malicious code

🔬 Comprehensive Threat Analysis

Threat Type

Cryptocurrency Wallet Drainer

Target

BlockchainClaim users (International)

Attack Method

Brand impersonation + obfuscated JavaScript

Exfiltration Channel

Firebase Database

Risk Assessment

LOW - Automated credential harvesting with Firebase Database

⚠️ Indicators of Compromise

68 obfuscation techniques

🏢 Brand Impersonation Analysis

Impersonated Brand

BlockchainClaim

Fake Service

BlockchainClaim wallet connection

Fraudulent Claims

⚔️ Attack Methodology

Primary Method: Wallet Phishing

The site attempts to steal cryptocurrency wallet credentials by prompting the user to connect their wallet, likely leading to a request for a seed phrase or private key on a spoofed wallet connection interface.

Target Blockchain

Solana