mainnet-solaxy[.]co

mainnet-solaxy.co was registered on 21 February 2026 and resolves to 172.67.195.174, an address owned by Cloudflare, Inc. (AS13335) located in the United States. The site presents the page title “SOLX Staking UI” and carries an SSL certificate labeled WE1. Automated scans on VirusTotal recorded detections from 2 of 93 security vendors, indicating the presence of malicious indicators. Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on two independent blocklists operated by PhishDestroy and ScamSniffer.

The domain is classified as a crypto‑scam that impersonates the Metamask brand, targeting users who may seek staking services. As of the report date, the site is taken offline, which limits immediate exposure but does not eliminate the risk of re‑activation or reuse of the same infrastructure. The available intelligence does not include a full content capture; the page’s internal structure, scripts, or credential‑harvesting mechanisms have not been publicly released.

Consequently, defenders cannot assess the exact phishing workflow, but the presence of a brand‑specific title and the low trust score strongly suggest a credential‑stealing operation. Mitigation recommendations include adding 172.67.195.174 to network denial lists, enforcing blocklist entries for mainnet-solaxy.co, monitoring for newly registered domains that share the “solaxy” keyword or similar SSL characteristics, and applying strict brand‑monitoring rules for Metamask‑related URLs. Continuous re‑scanning of the domain with updated threat‑intel platforms is advised to capture any changes should the site be reinstated.