neopepe[.]pages[.]dev

This domain is flagged as a cryptocurrency presale phishing site, currently under investigation for fraudulent activity targeting investors in meme token presales. The site, neopepe.pages.dev, presents itself as a legitimate governance token platform with the page title 'Neo Pepe Coin | Community Governance Meme Token | Presale Live,' a common tactic to lure victims into transferring funds for non-existent token allocations. Infrastructure analysis reveals the domain was registered on June 25, 2025, through Cloudflare, Inc., and resolves to the IP address 188.114.97.3. Detection metrics indicate minimal initial flagging, with 0 out of 95 security engines on VirusTotal identifying the domain as malicious at the time of assessment. However, the domain appears on one security blocklist, suggesting early-stage detection by specialized threat intelligence feeds. The SSL certificate is issued by Google Trust Services (WE1), a legitimate provider often exploited by threat actors to lend credibility to phishing infrastructure. Mitigation steps for this specific threat type include blocking the domain and associated IP at network perimeter devices, particularly for financial and cryptocurrency-related organizations. Security teams should monitor for user reports of interaction with the site and conduct retrospective analysis of network logs for connections to 188.114.97.3 or neopepe.pages.dev. Given the presale theme, users should be reminded to verify smart contract addresses through official project channels before transferring funds, as phishing sites frequently substitute attacker-controlled addresses in transaction prompts. Organizations handling cryptocurrency transactions should implement additional verification layers for high-value transfers to new or unverified token contracts.