solanex-token[.]pages[.]dev

On July 24, 2026 the domain solanex-token.pages.dev was identified as a crypto‑related phishing infrastructure and is currently reported as offline. The domain was registered on March 22, 2026 through Cloudflare, Inc., and resolves to the Cloudflare‑owned address 172.66.46.252, located in Canada. TLS termination is provided by a Google Trust Services certificate issued by the WE1 authority, and the site enforces HSTS while supporting HTTP/3. Additional client‑side technologies observed include Google Tag Manager and Cloudflare services, with the authoritative name servers ryan.ns.cloudflare.com and vita.ns.cloudflare.com. An HTTP request to the site returned a 403 status code, indicating that access to the content is being denied.

The page title returned by the server is "Solanex AI - Advanced DEX on Solana with AI Optimization," which aligns with the classified scam type of a crypto scam. The domain appears on one security blocklist and has been blocked by PhishDestroy. Reputation scoring from Gridinsoft assigned a trust score of 0 out of 100, reflecting extreme suspicion. VirusTotal scans reported ten of ninety‑four security vendors flagging the domain as malicious.

Risk level is elevated. While the page content has not been captured, the available telemetry suggests the domain was used to impersonate a Solana‑based decentralized exchange and could have been leveraged to harvest credentials or funds. Defenders should ensure the domain and its IP address are added to blocklists, monitor for any re‑registration attempts, and update intrusion detection signatures to detect similar Cloudflare‑hosted crypto phishing patterns. Continuous observation of related DNS queries and TLS certificate usage is recommended to preempt potential re‑use of the infrastructure.