port3-lkfs8[.]pages[.]dev

PhishDestroy identifies port3-lkfs8.pages.dev as a high-risk generic phishing threat, actively impersonating the PORT3 presale to steal user credentials or cryptocurrency. The domain is still live and poses an immediate danger to anyone seeking to participate in a legitimate PORT3 token sale.

Technical indicators reveal a deeply suspicious profile: VirusTotal shows only 1 out of 95 security vendors flagging this domain, a low detection rate typical of newly created phishing sites. It appears on 4 security blocklists, suggesting multiple sources have already identified malicious activity. The domain was created on April 06, 2026, a very recent date consistent with a fraudulent setup. It is registered through Cloudflare, Inc., a common registrar for phishing operations seeking anonymity, and resolves to IP address 188.114.97.3. The SSL certificate is issued by Google Trust Services / WE1, which provides a false sense of security but does not guarantee legitimacy. The page title "PORT3 | Presale" directly mimics the branding of the official PORT3 project.

Users who encounter this domain should immediately close the page and avoid entering any personal information, wallet details, or funds. Report the domain to security authorities and blocklist providers. For the specific threat of generic phishing, never click on unsolicited links claiming to offer presale access; always verify through official project channels. PhishDestroy recommends checking domain creation dates and security vendor flags before interacting with any presale-related sites, and using a reputable security solution that can block such threats in real time.