vro105ry[.]pages[.]dev

The domain vro105ry.pages.dev is actively involved in a phishing scam, posing as a presale event under the title 'HIGHER | Presale'. This domain is flagged by 5 out of 91 VirusTotal vendors as malicious and is listed on four public blocklists, including PhishDestroy, MetaMask, ScamSniffer, and SEAL. The site is hosted on Cloudflare Pages and uses an SSL certificate issued by Google Trust Services.

PhishDestroy detected this domain on the same day it was created, June 9, 2026. The rapid detection underscores the efficiency of PhishDestroy's threat intelligence pipeline, which identifies threats in the critical window before they propagate through antivirus databases. This early detection is crucial in mitigating the risks associated with such phishing operations.

The domain's high platform risk score of 95/100 indicates a significant threat level. The use of a reputable hosting provider like Cloudflare Pages and an SSL certificate from Google Trust Services may lend the site an appearance of legitimacy, potentially deceiving users into trusting the fake presale event. The active status of the domain suggests it continues to pose a risk to unsuspecting users who may be lured into providing sensitive information under the guise of a legitimate transaction.