claim-recall[.]world

Analysis of the domain claim-recall.world indicates it is a crypto drainer scam, currently offline as of July 24, 2026. The domain was flagged by PhishDestroy and classified as a crypto scam, with infrastructure analysis revealing it was hosted on Cloudflare's network (AS13335) and resolved to the IP address 104.21.70.65. The domain appears on at least one security blocklist, and nine out of ninety-five security vendors on VirusTotal detected it as malicious. No SSL certificate was present, which is atypical for legitimate financial or cryptocurrency-related services.

The page title, 'Recall Airdrop,' suggests the domain was used to lure victims with the promise of a cryptocurrency airdrop, a common tactic in crypto drainer schemes to trick users into connecting wallets or entering sensitive information. The domain was registered through Cloudflare, Inc., and used Cloudflare nameservers (archer.ns.cloudflare.com and cloe.ns.cloudflare.com). While the domain is currently offline, its prior association with a known phishing kit (Airdrop Scam) and its detection by multiple security vendors confirm its malicious intent.

Defenders should treat this domain as compromised and block it at the network level. Historical WHOIS data, if available, may provide additional context on registration patterns, but no further details on the threat actor or campaign duration are currently known. Organizations are advised to monitor for related domains using similar naming conventions or infrastructure, particularly those leveraging Cloudflare hosting for phishing operations.