# dexrpresale.pages.dev — SUSPICIOUS

> dexrpresale.pages.dev is a fake cryptocurrency presale scam with 0/95 VirusTotal detections. Check the full report for IOCs and safety guidance.

## Summary
This domain, dexrpresale.pages.dev, is actively hosting a cryptocurrency presale scam designed to trick users into sending funds to cybercriminals. The page mimics legitimate presale websites, likely leveraging urgency and social engineering to pressure victims into depositing cryptocurrency under false promises of high returns. PhishDestroy identified this as a direct financial threat with no detections on VirusTotal as of the latest scan, indicating it evades most automated detection systems.  

PhishDestroy flags this domain based on multiple technical indicators. It was registered through Cloudflare, Inc., resolving to IP address 188.114.96.3, and secured with a Let's Encrypt SSL certificate. The site currently shows 0 detections out of 95 scanners on VirusTotal, suggesting it is newly active and not yet widely recognized as malicious by security vendors. This low detection rate increases the risk of successful exploitation, especially for users relying solely on automated tools for protection.  

If you visited dexrpresale.pages.dev, immediately cease any interaction and do not enter personal or financial information. Check your cryptocurrency wallets and accounts for unauthorized transactions. Use a reputable antivirus or browser security extension to scan your device for malware. Report the domain to your local cybersecurity authority or platform (e.g., Google Safe Browsing, PhishDestroy) to aid in global threat intelligence. Avoid clicking on any links or downloading files from the site, as these may contain malware or lead to further exploitation.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/9c6668cb-fdae-4667-bb60-9c94d07b5447
- PhishDestroy: https://phishdestroy.io/domain/dexrpresale.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/dexrpresale.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/dexrpresale.pages.dev/
Last updated: 2026-03-28