solaxy-tokens[.]pages[.]dev

This domain, solaxy-tokens.pages.dev, poses as a legitimate cryptocurrency platform to deceive users into participating in a fraudulent token presale. The site advertises a nonexistent SOLX token under the guise of a crypto presale, mimicking the branding and interface of OKX, a well-known cryptocurrency exchange. Victims are likely tricked into connecting wallets or transferring funds, resulting in direct financial theft or unauthorized access to digital assets. The threat specifically targets users familiar with crypto investments, exploiting trust in established brands to facilitate fraudulent transactions. Analysis indicates this domain was registered on June 9, 2026, through Cloudflare Pages, a service often abused for hosting phishing content due to its ease of deployment and free SSL certificates. The domain is currently flagged by 4 out of 95 security vendors on VirusTotal, and it appears on three independent security blocklists. Infrastructure review shows the domain resolves to the IP address 188.114.97.3, with an SSL certificate issued by Google Trust Services (WE1), which does not inherently validate the legitimacy of the site’s content. These technical indicators confirm the domain’s malicious intent and its active status as a threat. Users who have visited solaxy-tokens.pages.dev or interacted with its content should immediately disconnect any connected wallets and cease all transactions. If funds were transferred, report the incident to the relevant cryptocurrency exchange and local law enforcement, providing transaction hashes and wallet addresses involved. Scan all devices used to access the site for malware, as phishing domains may deploy additional payloads. Monitor linked accounts for unauthorized activity and enable multi-factor authentication where available. Cryptocurrency transactions are irreversible, so immediate action is critical to mitigate further risks.