claim-world[.]xyz

This domain, claim-world.xyz, operates as an active crypto drainer phishing endpoint designed to illicitly extract cryptocurrency assets from victim wallets. Analysis indicates the site employs deceptive interfaces mimicking legitimate cryptocurrency platforms, tricking users into authorizing transactions that transfer funds to attacker-controlled wallets. The threat actor likely leverages social engineering tactics, such as fake airdrop claims or wallet verification prompts, to exploit victims. Given the elevated risk level, this infrastructure poses a direct financial threat to users engaging with the domain. Infrastructure analysis reveals the domain was registered on June 28, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with malicious registrations. The domain resolves to the IP address 188.114.96.3, which may host additional phishing or malicious content. Detection metrics from VirusTotal indicate minimal coverage, with only 1 out of 95 security vendors flagging the domain as malicious. The SSL certificate, issued by Google Trust Services, provides a veneer of legitimacy but does not mitigate the underlying threat. The page title, 'World,' suggests an attempt to appear generic or innocuous, further obscuring its malicious intent. Users who have interacted with claim-world.xyz should immediately revoke any wallet authorizations granted to the domain and disconnect connected applications. It is critical to audit transaction histories for unauthorized transfers and report any suspicious activity to relevant blockchain explorers or security platforms. Affected individuals should also monitor associated accounts for secondary phishing attempts or credential harvesting. Given the domain's active status and low detection rate, users are advised to exercise heightened caution when engaging with unsolicited cryptocurrency-related links or prompts.