solanex-ai-claim[.]pages[.]dev

PhishDestroy has identified solanex-ai-claim.pages.dev as an active brand impersonation threat, specifically targeting the foundation brand. This domain is currently live and poses a high risk to users, masquerading as a legitimate platform under the title "Solanex AI - Advanced DEX on Solana with AI Optimization." The domain was created on November 20, 2025, and is registered through Cloudflare, Inc., with an SSL certificate issued by Google Trust Services (WE1). It resolves to IP address 172.66.45.34 and has been flagged by 1 out of 95 VirusTotal security vendors, indicating a consensus of suspicious activity. Additionally, it appears on two security blocklists, further confirming its malicious nature.

While the domain has a low detection rate on VirusTotal, the combination of recent creation, brand impersonation, and blocklist presence suggests a coordinated phishing campaign. The use of Cloudflare may help obscure the true hosting origin. The threat type is brand impersonation, where attackers mimic the foundation's identity to deceive users into connecting wallets or sharing sensitive information. Given the sophisticated page title and design, this domain likely aims to steal cryptocurrency assets through wallet interactions or credential harvesting.

Users are strongly advised to avoid visiting solanex-ai-claim.pages.dev or interacting with any content from this domain. If you have already engaged with the site, immediately revoke any wallet permissions, change passwords, and monitor accounts for unauthorized activity. Report the domain to security blocklists and the foundation's official channels. Stay vigilant against similar domains and always verify URLs before connecting your wallet or entering credentials.