doc-exxods-us[.]pages[.]dev

PhishDestroy identifies doc-exxods-us.pages.dev as an active drain-scamsite impersonating a document portal to trick visitors into downloading malicious payloads that drain cryptocurrency wallets. The threat type is generic phishing with an elevated risk rating. No specific brand or drainer kit kit was disclosed in open sources, but the page’s hostile behavior aligns with known cryptocurrency drainer toolkits. This domain resolves to IP 188.114.96.3 via Cloudflare, Inc. registration. The SSL certificate was issued by Google Trust Services. VirusTotal shows 2 out of 95 security vendors currently flagging the site. Exact creation date, additional blocklist counts, and Google Safe Browsing status were not provided in the available intelligence feed. The site remains live and responsive as of the latest check. Users should immediately block the domain at network and browser levels and avoid any downloads from the page. Remaining risk is elevated due to active hosting behind Cloudflare and the potential for ongoing payload updates. Exercise extreme caution and report indicators to local CERT teams.