wallstreetpepesale[.]pages[.]dev

This domain, wallstreetpepesale.pages.dev, is flagged as a high-risk cryptocurrency presale phishing site targeting users of the WEPE Token, a purported Wall Street Pepe Token presale. Analysis indicates the site employs generic phishing tactics to harvest credentials and cryptocurrency wallet details, likely through a drainer kit designed to mimic legitimate token sale pages. The page title, WEPE Token | Wall Street Pepe Token | WEPE Presale, directly references the fraudulent offering, suggesting an intent to deceive investors seeking early access to new tokens. Infrastructure analysis reveals the following technical indicators: the domain is registered through Cloudflare Pages and resolves to IP address 172.66.44.125. The SSL certificate is issued by Google Trust Services (WE1). VirusTotal detection shows 4 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist and was created on June 9, 2024. Google Safe Browsing status is not explicitly provided, but the domain is actively blocked by PhishDestroy. As of the latest assessment, wallstreetpepesale.pages.dev remains active and unresolved. No takedown or sinkholing actions have been observed, maintaining a high residual risk to users. Organizations and individuals are advised to block the domain at the DNS or proxy level, update endpoint protection rules to include the IP and domain, and alert users to the presence of this phishing campaign. Monitoring for related domains using the same registrar or IP range is recommended to preemptively mitigate similar threats.