recallprocessnz[.]com

recallprocessnz.com entered the PhishDestroy evidence set on Aug 7, 2026. Stored content metadata identifies Ledger as the apparent target. The stored content classification is fake airdrop. The assembled evidence scores 73/100 (high).

Two independent sources are positive: VirusTotal and Cloudflare Radar. VirusTotal recorded 6 detections among 91 engines: alphaMountain.ai, CRDF, Emsisoft, Fortinet, Netcraft, Webroot on Aug 7, 2026 at 13:24 UTC. Cloudflare Radar classified the hostname as malicious and placed it in the phishing category; its verdict timestamp was not retained. The evidence is not unanimous. The external blocklist snapshot contained no matches on Aug 7, 2026 at 14:20 UTC. Google Safe Browsing returned no flag on Aug 7, 2026 at 13:24 UTC. URLScan captured the page on Aug 7, 2026 at 13:21 UTC.

The collector marked the hostname reachable on Aug 7, 2026 at 13:21 UTC, but did not retain the HTTP response code. Registration records for the domain list Fewmoretaps OU d/b/a Trustname.com as the registrar and Aug 4, 2026 as the creation date. Registration preceded first observation by 2 days. At collection time, the hostname resolved to 188.114.97.3 on AS13335 (Cloudflare, Inc.). The recorded endpoint location is Toronto, CA. The stored server header is cloudflare. Captured page title: “Suspected Phishing | Cloudflare”. DOM analysis completed on Aug 7, 2026 at 14:20 UTC; stored DOM score 0/100. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and Cloudflare Radar. TLS metadata lists Google Trust Services as the certificate issuer with validity through Nov 2, 2026; checked Aug 7, 2026 at 16:02 UTC.

The 0/100 DOM score means that the DOM pass stored no scored indicators; it does not negate the independent source findings. Taken together, the page content and independent findings support classifying this hostname as Ledger-themed fake airdrop.