solexy-stakes[.]pages[.]dev

The domain solexy-stakes.pages.dev is actively hosting a crypto_drainer, a type of malicious tool designed to steal cryptocurrency from unsuspecting victims. This threat is currently under investigation but remains active, indicating ongoing exploitation. The domain is not affiliated with any legitimate brand, and its sole purpose appears to be fraudulent cryptocurrency harvesting through deceptive tactics.

This domain was flagged by 0 of 95 VirusTotal vendors as of the latest scan, indicating it has not yet been widely detected by security solutions despite its malicious nature. It is registered through Cloudflare, Inc., resolves to IP address 172.66.44.155, and operates under a Google Trust Services SSL certificate. The domain is part of the Pages.dev ecosystem, which is commonly abused by threat actors to host phishing and malware campaigns. With no detections yet, this domain poses a high risk to users who may interact with it, particularly in cryptocurrency transactions.

PhishDestroy identifies solexy-stakes.pages.dev as a high-risk crypto_drainer domain that requires immediate attention. Users are advised to avoid interacting with this domain entirely due to its confirmed malicious activity. Security teams should block the domain and IP address (172.66.44.155) at the network level to prevent further exploitation. Additionally, users should report this domain to their security vendors and consider using reputable threat intelligence platforms to stay informed about emerging crypto_drainer campaigns. Regular monitoring and proactive blocking are essential to mitigate the risk of cryptocurrency theft.