cg4wer4[.]pages[.]dev

This domain is flagged as a crypto scam and is currently active. It resolves to IP 172.66.44.129, hosted via Cloudflare Pages and registered through Cloudflare, with the IP located in Canada. The domain was created on June 9, 2026. The page title references a BlackRock token presale and financial innovation, indicating the scam is likely impersonating a legitimate investment opportunity to lure victims into a fraudulent crypto presale. The site returns a 200 HTTP status and uses Node.js, Vue.js, Nuxt.js, HSTS, Cloudflare, and HTTP/3. The SSL certificate is issued by Google Trust Services. VirusTotal scanned the domain with 91 vendors, reporting zero detections; however, absence of detection does not confirm safety. Gridinsoft gives a trust score of 0 out of 100. The domain appears on one security blocklist and is blocked by PhishDestroy. Defenders should treat this as an active crypto phishing operation. Recommended actions include blocking the domain at the DNS or proxy level, monitoring for related subdomains under pages.dev, and educating users not to engage with unsolicited token presale offers. The exact content of the page has not been visually analysed, but the title alone confirms a deceptive financial scheme. Uncertainties remain about the full scope of the campaign, including whether the same threat actor operates additional domains or targets other brands.