dexrp-org[.]pages[.]dev

Analysis of the domain dexrp-org.pages.dev indicates a confirmed phishing site targeting cryptocurrency investors. The domain, registered on March 26, 2026, through Cloudflare, Inc., currently resolves to IP address 172.66.47.163. The page title, 'Join the DEXRP Presale – Be Part of the Future of Decentralized Trading,' explicitly advertises a cryptocurrency presale, a common lure in phishing operations. Infrastructure analysis reveals the use of Cloudflare hosting, Google Trust Services SSL certificate, and HTTP/3 protocol, alongside Google Tag Manager and HSTS, which are frequently observed in both legitimate and malicious sites but do not mitigate the risk in this context. VirusTotal reports that 2 of 95 security vendors flag this domain, while the domain appears on one security blocklist and is blocked by PhishDestroy. The Gridinsoft trust score is 0/100, further supporting its classification as high-risk. The domain remains active as of July 12, 2026. Defenders should treat this domain as malicious and prioritize blocking it at the DNS or network level. No further details about the specific cryptocurrency brand or underlying phishing kit are available from the provided intelligence. Additional investigation into connected wallets or payment addresses is recommended to disrupt associated financial fraud.