cloudflare-frontend-9xj[.]pages[.]dev

The domain cloudflare-frontend-9xj.pages.dev has been identified as a high-risk threat due to brand impersonation. This domain specifically targets Solana, presenting itself as a legitimate service with the page title 'SPLITDO Token Presale | Blockchain Bill Splitting on Solana'. The risk level is categorized as high because it actively impersonates a well-known brand, potentially misleading users.

Analysis indicates that the domain was created on March 27, 2026, and is currently active. It resolves to the IP address 188.114.97.3 and has an SSL certificate issued by Google Trust Services / WE1. Registered through Cloudflare Pages, this domain appears on one security blocklist, suggesting further scrutiny. VirusTotal results show that 2 out of 95 security vendors have flagged this domain as malicious, which supports the high-risk assessment.

To mitigate the risks associated with this domain, users are advised to avoid any interaction with cloudflare-frontend-9xj.pages.dev. Organizations should update their security tools to block access to this domain and monitor for any traffic that might indicate user engagement. It is also recommended to educate users about the potential threats of brand impersonation and to verify the legitimacy of web pages before engaging in any transactions or sharing sensitive information.