fsdgfghjkkjhghgjhjm[.]pages[.]dev

This domain, fsdgfghjkkjhghgjhjm.pages.dev, is flagged as a high-risk crypto drainer campaign targeting cryptocurrency investors by impersonating the WEPE Token (Wall Street Pepe Token) presale. Analysis indicates the site employs social engineering tactics to deceive victims into connecting wallets, likely executing unauthorized transactions to drain funds. The page title, 'WEPE Token | Wall Street Pepe Token | WEPE Presale,' directly mimics legitimate token sale promotions, increasing the likelihood of successful exploitation among targets seeking early investment opportunities. Infrastructure analysis reveals the domain was registered through Cloudflare Pages on June 09, 2026, and currently resolves to the IP address 172.66.47.46. Detection metrics show the domain is flagged by 2 out of 95 security vendors on VirusTotal, with an additional blocklist entry from PhishDestroy. The SSL certificate is issued by Google Trust Services (WE1), a common feature in both legitimate and malicious domains leveraging Cloudflare's infrastructure. The domain appears on one security blocklist, indicating limited but confirmed detection within the threat intelligence community. As of the latest assessment, the domain remains active, posing an ongoing risk to users unaware of the fraudulent presale. No takedown or sinkholing actions have been observed, and the infrastructure continues to resolve normally. Users are advised to verify token sales through official channels only, avoid connecting wallets to unverified platforms, and cross-reference domain reputation using multiple threat intelligence sources. The combination of active hosting, minimal detection, and direct brand impersonation maintains a high risk level for potential victims.