solaxyclaims[.]pages[.]dev

This domain is an active crypto drainer targeting users of the SOLX token presale. Analysis indicates the site mimics legitimate cryptocurrency offerings to trick visitors into connecting wallets, enabling unauthorized transactions that drain funds. The threat specifically exploits interest in the SOLX token, using social engineering tactics to prompt users to authorize malicious smart contracts or disclose private keys. Infrastructure analysis reveals the domain was created on June 09, 2026, and is registered through Cloudflare Pages. Security vendors on VirusTotal flagged the domain as malicious, with 2 out of 95 engines detecting it. The domain appears on one security blocklist and resolves to the IP address 188.114.97.3. Its SSL certificate is issued by Google Trust Services, a common feature in both legitimate and malicious sites to evade basic detection. The page title, "Solaxy: Discover SOLX Token and the Solaxy Crypto Presale," further confirms the impersonation of a crypto presale event. Users who visited solaxyclaims.pages.dev and connected a wallet or entered credentials should immediately revoke any suspicious smart contract approvals using a blockchain explorer. Disconnect the wallet from all decentralized applications and transfer remaining funds to a new, secure wallet. Monitor transaction history for unauthorized activity and report the incident to relevant platforms. If private keys or seed phrases were exposed, consider the compromised wallet permanently at risk. Enable multi-factor authentication on all accounts and remain vigilant for follow-up phishing attempts via email or social media.