claim-tokens[.]icu

The domain claim-tokens.icu is a phishing site engaged in brand impersonation targeting OKX, a cryptocurrency exchange. It poses an elevated risk by attempting to deceive users into believing they are interacting with a legitimate OKX token claim or promotion, potentially leading to credential theft or financial loss. No drainer kit was identified, but the site was confirmed to be a cryptocurrency scam. As of the latest verification, claim-tokens.icu has been taken offline.

Technical indicators for claim-tokens.icu show limited but notable detection. The domain was flagged by 2 of 95 security vendors on VirusTotal, including alphaMountain.ai and Forcepoint ThreatSeeker. It appears on 1 security blocklist, specifically PhishDestroy, and has a Gridinsoft trust score of 0/100. The domain was registered through NameSilo, LLC on August 20, 2025. The SSL certificate was issued by WE1, and the observed page title was 'Just a moment...'. No IP address was available for analysis, and Google Safe Browsing did not flag the domain at the time of assessment.

Users who interacted with claim-tokens.icu should immediately change any passwords or credentials entered on the site, enable two-factor authentication (2FA) on all accounts, and monitor for unauthorized transactions or account activity. If cryptocurrency was involved, revoke any token approvals granted to suspicious contracts and consider transferring funds to a new wallet. Report the phishing domain to the impersonated brand (OKX) and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader mitigation efforts.