presale-jessecoinvip[.]pages[.]dev

This domain is flagged as a high-risk crypto token presale phishing site targeting users through fraudulent investment offers. Analysis indicates the page impersonates a legitimate cryptocurrency presale for $JESSE, a tactic commonly associated with token drainer schemes designed to steal wallet credentials or funds during transactions. The domain exhibits characteristics consistent with malicious financial scams, including urgency-driven messaging and fake token sale promises. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 172.66.47.148 and was registered through Cloudflare Pages on June 09, 2026. Despite its recent creation, it appears on four security blocklists (PhishDestroy, MetaMask, ScamSniffer, SEAL) and maintains an SSL certificate issued by Google Trust Services (WE1). VirusTotal currently reports 0 detections out of 95 engines, suggesting the threat may still be evading automated detection systems. The page title explicitly displays $JESSE PRE-SALE, reinforcing its fraudulent intent to deceive users into participating in a non-existent token offering. Mitigation steps for this specific threat type include immediate blocking of the domain and associated IP at network perimeter devices. Wallet providers and exchanges should flag the domain in transaction monitoring systems to prevent users from interacting with the presale page. End users should be advised to verify token sales through official project channels only, avoiding links from unsolicited messages or social media promotions. Security teams should monitor for wallet drainer activity patterns following exposure to this domain, particularly transactions involving the $JESSE token identifier or similar presale-themed addresses.