mmt-claim[.]run

Analysis of the domain mmt-claim.run confirms its classification as a high-risk crypto drainer scam site, active as of July 12, 2026. The domain is flagged on one security blocklist and holds a trust score of 0/100, indicating no reputable standing. Infrastructure analysis reveals Cloudflare-hosted nameservers (jill.ns.cloudflare.com, sterling.ns.cloudflare.com) and resolution to IP 104.21.70.163 under AS13335 (Cloudflare, Inc.). The SSL certificate is issued by Google Trust Services (WE1), a common configuration for malicious domains leveraging Cloudflare's proxy services. VirusTotal reports 4 of 95 security vendors flagging this domain, while AlienVault OTX lists it in 23 threat intelligence pulses, further corroborating its malicious nature. The HTTP response code is 403, suggesting the server is actively rejecting direct requests, a tactic often used to evade automated scanning while remaining accessible to targeted victims. The page title 'Just a moment...' aligns with Cloudflare's default challenge page, indicating the domain may be using Cloudflare's anti-bot measures to filter traffic. No specific brand or cryptocurrency platform is named in the available data, but the scam type is explicitly classified as a crypto drainer. Defenders should treat this domain as active and high-risk, blocking resolution at the DNS level and monitoring for connections to the associated IP. Given the use of Cloudflare's infrastructure, additional scrutiny of domains sharing the same nameservers or IP range may be warranted to identify related threats.