wutnot[.]pages[.]dev

Analysis of wutnot.pages.dev indicates a phishing domain targeting presale participants, as evidenced by the page title 'WutNot Presale' and its classification as generic_phishing. The domain was registered on June 9, 2026, and is currently active, resolving to IP 188.114.96.3, which is hosted on Cloudflare infrastructure in Canada. The site returns an HTTP 200 status, suggesting operational functionality, and employs technologies including Chart.js, Tailwind CSS, Unpkg, jsDelivr, and HSTS, alongside Cloudflare-specific services like cdnjs and HTTP/3. The domain appears on one security blocklist, though no detections were recorded among the 91 vendors that scanned it on VirusTotal. The SSL certificate is issued by Let's Encrypt (E8), and the domain is flagged with a trust score of 0/100. While the absence of detections does not confirm safety, the combination of a presale-themed page title, Cloudflare Pages registration, and active blocking by security vendors supports its classification as malicious. Defenders should monitor for connections to this domain, particularly in environments where presale or token-related activities are conducted. Further investigation is required to determine the exact nature of the phishing scheme, as no specific brand or kit details are currently available.