solanexai-claim[.]pages[.]dev

This domain, solanexai-claim.pages.dev, is actively flagged as a high-risk phishing site impersonating Solana to distribute fraudulent token claims. Infrastructure analysis reveals the domain was registered on March 23, 2026, through Cloudflare, Inc., and currently resolves to the IP address 188.114.96.3. The site presents itself with the page title 'Claim your SOLDEX tokens,' directly targeting users expecting legitimate Solana ecosystem airdrops. The domain employs standard security technologies including HSTS, Google Tag Manager, and Cloudflare, alongside HTTP/3, which are commonly used to lend an appearance of legitimacy while masking malicious intent. The SSL certificate is issued by Google Trust Services, a valid but frequently abused provider in phishing operations. The domain appears on one security blocklist and is blocked by at least one threat intelligence service. While only two of 95 security vendors on VirusTotal currently flag this domain, this limited detection does not indicate safety, particularly given the domain's recent registration and active status. The Gridinsoft trust score of 0/100 further supports the classification of this domain as malicious. Defenders should treat this domain as an active threat vector for cryptocurrency fraud. The combination of a recent registration date, explicit token-claim branding, and association with a major blockchain platform indicates a deliberate attempt to exploit user trust in Solana-related promotions. No evidence suggests this is a legitimate or authorized distribution channel. Network-level blocking and user education regarding unsolicited token claims are recommended to mitigate exposure.