solaxytokensclaims[.]pages[.]dev

This domain, solaxytokensclaims.pages.dev, is actively engaged in brand impersonation targeting OKX, a major cryptocurrency exchange. The site presents itself as a legitimate SOLX Layer 2 token presale opportunity, using the title 'Solaxy Token: SOLX Layer 2 Token I Best Crypto Presale 2025.' Such schemes are designed to deceive users into transferring cryptocurrency or disclosing sensitive credentials under the false pretense of participating in an exclusive token sale or airdrop. The fraudulent nature of this campaign is further evidenced by its attempt to exploit trust in established brands to facilitate unauthorized transactions or data theft. Analysis indicates that the domain was registered through Cloudflare Pages on June 21, 2025, and currently resolves to the IP address 188.114.96.3. Detection metrics reveal that 6 out of 95 security vendors on VirusTotal have flagged this domain as malicious, while it also appears on one security blocklist. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the threat, as fraudulent sites frequently leverage valid certificates to appear legitimate. Infrastructure analysis reveals that the domain remains operational, posing an ongoing risk to unsuspecting users. Users who have visited solaxytokensclaims.pages.dev or interacted with its content should take immediate action to mitigate potential risks. Disconnect any connected wallets or devices from the site and revoke any permissions granted to it. Monitor financial accounts and cryptocurrency wallets for unauthorized transactions, and consider reporting the incident to relevant authorities or security response teams. Additionally, scan affected devices for malware using updated security tools, as phishing sites may deploy malicious payloads or redirect users to further harmful resources.