# apemars-presale.pages.dev — SUSPICIOUS

> apemars-presale.pages.dev is a fake pre-sale scam using Cloudflare Pages to impersonate legitimate crypto offers. Resolves to 188.114.96.

## Summary
PhishDestroy identifies apemars-presale.pages.dev as an active fake pre-sale scam leveraging Cloudflare Pages hosting to deceive users into participating in a non-existent cryptocurrency or token pre-sale event. The domain poses a high risk of financial fraud by mimicking legitimate promotional pages to harvest payment credentials or cryptocurrency deposits. Security researchers note that such campaigns often escalate during market hype cycles, making immediate user awareness and blocking critical.


This domain was flagged as generic_phishing with a risk level under_investigation. Intelligence shows a VirusTotal detection rate of 0/95, indicating it remains undetected by most antivirus engines as of the latest scan. It resolves to IP address 188.114.96.3 and is registered through Cloudflare, Inc., utilizing a Let's Encrypt SSL certificate to appear legitimate. As a subdomain of pages.dev—a Cloudflare Pages hosting service—the domain benefits from CDN-level anonymity, complicating takedown efforts and origin tracing. No current inclusion on major blocklists was detected at the time of analysis.


To mitigate exposure to this fake pre-sale scam, users should avoid visiting apemars-presale.pages.dev entirely. Security teams and individuals are advised to block the domain at DNS level and report the IP 188.114.96.3 to firewall and threat intelligence platforms. Organizations should monitor for DNS queries to pages.dev subdomains as indicators of potential compromise. Since the threat uses Let's Encrypt, certificate transparency logs may reveal additional related domains—security teams should query logs for *.pages.dev issuances linked to suspicious patterns. Always verify official project websites via verified social media or press releases before engaging with pre-sale offers.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/4ac3b53b-3555-4193-bd52-d09c2bfda601
- PhishDestroy: https://phishdestroy.io/domain/apemars-presale.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/apemars-presale.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/apemars-presale.pages.dev/
Last updated: 2026-03-28