claim-meme-token[.]pages[.]dev

PhishDestroy identifies claim-meme-token.pages.dev as an active brand impersonation domain targeting OKX users. The page is configured as a cryptocurrency drainer kit designed to deceive visitors into connecting malicious wallets, resulting in automatic token theft. This campaign relies on social engineering to trick users into believing they are eligible to claim meme tokens through a fake OKX promotional page.

This domain was flagged with a VirusTotal detection score of 1 out of 95 security vendors. It is registered via Cloudflare, Inc., resolving to IP 188.114.96.3, and secured with a Google Trust Services SSL certificate. The domain appears on 2 public blocklists and is actively blocked by MetaMask and SEAL security systems. While the exact creation date is not provided, the presence of Cloudflare Pages hosting and SSL issuance indicates recent deployment within the last 6–12 months.

As of current monitoring, claim-meme-token.pages.dev remains active and elevated in risk. Immediate response has included blocklisting by MetaMask and SEAL based on behavioral and signature analysis. Users are strongly advised to avoid interacting with any OKX-related claims outside the official website okx.com. The residual risk remains elevated due to active phishing infrastructure and user targeting via social media and messaging platforms. Remain vigilant—verify any suspicious link using PhishDestroy before proceeding.