claim[.]commom[.]xyz

The domain claim.commom.xyz is a phishing site designed to function as a crypto drainer, a type of scam that targets cryptocurrency wallets by draining funds without the victim's consent. This site does not impersonate a specific brand and is not linked to a known drainer kit. As of the latest verification, claim.commom.xyz has been taken offline, but its prior activity poses a risk to users who may have interacted with it.

Technical analysis of claim.commom.xyz reveals limited detection, with only 1 of 95 VirusTotal security vendors flagging the domain, specifically Forcepoint ThreatSeeker. The domain was registered through PDR Ltd. d/b/a PublicDomainRegistry.com on 2025-10-27 06:06:15 and resolves to the IP address 104.21.72.42, hosted on Cloudflare's network (AS13335) in the US. It appears on 1 security blocklist, PhishDestroy, and has a Gridinsoft trust score of 0/100. No SSL certificate was observed, and the page title displayed was 'Common'. Nameservers for the domain are magali.ns.cloudflare.com and norm.ns.cloudflare.com.

Users who may have interacted with claim.commom.xyz should take immediate steps to secure their assets. Revoke any token approvals granted to unknown or suspicious contracts using a tool like Etherscan's token approval checker. Transfer remaining funds to a new, secure wallet and monitor all connected accounts for unauthorized transactions. If credentials were entered on the site, change passwords immediately and enable two-factor authentication (2FA) on all relevant accounts. Report the domain to platforms such as Google Safe Browsing, PhishTank, or local cybercrime authorities to aid in broader mitigation efforts.