wlfisol[.]pages[.]dev

This domain is flagged as a crypto-phishing site targeting users through a fraudulent Portals Presale portal branded with Genesis. Analysis indicates the site is designed to harvest cryptocurrency wallet credentials, seed phrases, or private keys under the guise of a legitimate token presale event. The page title Portals Presale powered by Genesis is a direct attempt to mimic authentic blockchain projects, leveraging brand confusion to deceive potential victims into disclosing sensitive financial information. Infrastructure analysis reveals the domain was registered on June 09, 2026, through Cloudflare Pages, a platform commonly abused for rapid deployment of phishing pages. The site resolves to the IP address 172.66.47.2 and uses an SSL certificate issued by Google Trust Services (WE1), which provides a false sense of security. Despite its active status, the domain has zero detections across 95 security engines on VirusTotal, highlighting its ability to evade initial automated detection. It appears on one security blocklist and is currently blocked by PhishDestroy, confirming its malicious intent. If you visited wlfisol.pages.dev or interacted with its content, immediate action is required. Disconnect any connected wallets from the site and revoke all permissions granted through wallet interfaces. Scan the device used for access with updated security tools to detect potential malware or keyloggers. Monitor all linked cryptocurrency wallets and financial accounts for unauthorized transactions, and consider migrating assets to new wallets if credentials were entered. Report the domain to relevant blockchain security teams and local cybercrime authorities to assist in takedown efforts and prevent further victimization.