api[.]betterclaimsol[.]com
Phishing- und Sicherheitsprüfung für api.betterclaimsol.com
“BetterClaimSOL - Recover Solana Rent with Ease”
api.betterclaimsol.com — Inhalt nicht verfügbar (HTTP 404). Markenidentität: Solana; Betrugstyp: Crypto Drainer. Zusammenfassung der Beweislage: VirusTotal 1/94 (SOCRadar); PhishDestroy score 55/100. Registrar: NameCheap.
Die ausführliche Analyse von PhishDestroy AI bleibt auf Englisch, damit der ursprüngliche forensische Bericht unverändert bleibt.
Evidence Analysis
The domain api.betterclaimsol.com is a brand impersonation phishing site that posed as Solana to trick users into connecting their wallets, specifically a wallet_connect_phish scam. The site, which was taken offline, used the title 'BetterClaimSOL - Recover Solana Rent with Ease' to lure victims into authorizing transactions that would drain their cryptocurrency. No drainer kit was detected, but the threat is elevated due to the direct financial risk.
Technical analysis shows that api.betterclaimsol.com was flagged by 1 of 95 VirusTotal vendors, including SOCRadar, and appeared on 1 security blocklist (PhishDestroy). The domain was registered through NameCheap, Inc. on December 29, 2025, at 16:56:38, and resolved to IP address 100.29.214.235, hosted in the US on Amazon.com, Inc. infrastructure (AS14618). Its SSL certificate was issued by Let's Encrypt / E7. The site, which is currently returning a 404 HTTP status, was built on Node.js, Ubuntu, Nginx, Express, and Google Analytics. Google Safe Browsing did not flag the domain.
Users who interacted with api.betterclaimsol.com should immediately revoke any token approvals granted to the site and move their funds to a new, secure wallet. Since this was a wallet-connect phishing attempt, changing passwords is not applicable, but enabling two-factor authentication (2FA) on all crypto-related accounts is strongly recommended. Report the domain to blockchain security platforms and to the impersonated brand, Solana, to help prevent further scams.
Datenabdeckung12 recorded checks
Pipeline zur Reaktion auf Sicherheitsbedrohungen
Status der öffentlichen Sperrliste
Gespeicherte Aufnahme
Domain-Intelligenz
Technische DetailsDNS, SSL-SANs, Zeitstempel
ICANN OVERSIGHT
Registration: betterclaimsol.com
Akkreditierung und RAA-Kontext
Akkreditierung und RAA-Kontext
Registrar accreditation and DNS abuse obligations
For the registrable domain betterclaimsol.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Casino / Gambling License Verification
Technologien · 5 identified
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.
nodejs.org 100 % KonfidenzUbuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.
www.ubuntu.com 100 % KonfidenzNginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org 100 % KonfidenzExpress is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.
expressjs.com 100 % KonfidenzGoogle Analytics is a free web analytics service that tracks and reports website traffic.
google.com 100 % KonfidenzVirusTotal-Analyse
Website-Performanceanalyse
Google PageSpeed Insights — mobile performance audit of api.betterclaimsol.com · checked Mar 17, 2026
Nachweise und externe BerichteIndependent lookups and source reports
PD-20260317-42C691 Recipient: abuse@namecheap.com Victim safety and official reportingImmediate actions and verified reporting channels
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Melden Sie sich bei Ihren örtlichen Behörden
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.