SafeMode - Analysis: claimmemesolana.web.app

Visual Capture

Detection Info

https://claimmemesolana.web.app/

Detected Brand

Unknown

Country

International

Confidence

95%

HTTP Status

200

Report ID

e038570a-087…

Analyzed

2026-02-25 23:24

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T178F1316094046B371187D3E9637D2B8BFBE18245C667530E96F6D3A80FEEE08DC22D59
CONTENT ssdeep	192:vcqjA/444WMpLo0QwczadEIj+bGe2ExfU:vbO444WnoIaj8xfU

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	c7693c23c79898e3
VISUAL aHash	0100bc3c742c0e1e
VISUAL dHash	b3283961c9e83ca4
VISUAL wHash	0180fcbc7c3e1e3e
VISUAL colorHash	39007000000
VISUAL cropResistant	26cccce4e6c283a2,71ccc4f0b696e071,71ccc4f0b296e071,a2a2a08696a8a2a2,b3283961c9e83ca4

Code Analysis

Risk Score 3/100

Threat Level ALTO

⚠️ Phishing Confirmed

🔬 Threat Analysis Report

• Threat: Phishing
• Target: Cryptocurrency Dapp users
• Method: Stealing wallet information
• Exfil: Unknown (form submission likely)
• Indicators: Free hosting, brand logo on free hosting, form
• Risk: High

🔒 Obfuscation Detected

js_packer

📡 API Calls Detected

GET

📊 Risk Score Breakdown

Total Risk Score

95/100

Contributing Factors

Free Hosting

The site is hosted on a free hosting platform which is a major indicator of phishing.

JavaScript Obfuscation

Obfuscation of the JavaScript code indicates an attempt to hide malicious activity from security solutions.

🔬 Comprehensive Threat Analysis

Threat Type

Unknown Threat

Target

General public

Attack Method

Brand impersonation + obfuscated JavaScript

Exfiltration Channel

Unknown

Risk Assessment

LOW - Automated credential harvesting with Unknown

⚠️ Indicators of Compromise

68 obfuscation techniques

🏢 Brand Impersonation Analysis

Impersonated Brand

BlockchainClaim/Crypto Dapp Service

Fake Service

BlockchainClaim wallet connection / Airdrop

Fraudulent Claims

⚔️ Attack Methodology

Primary Method: Phishing through Wallet Impersonation.

The attackers are using a seemingly legitimate site on free hosting and brand logo, to lure users into connecting their wallets. The 'Connect Wallet' button will likely redirect to a page which steals the users wallet seed phrase or credentials.

Target Blockchain

Solana