o-fficial-exo-us-en[.]pages[.]dev

The domain o-fficial-exo-us-en.pages.dev poses a specific generic phishing threat, designed to mimic legitimate platforms and trick users into divulging sensitive information. This domain was hosted on Cloudflare Pages and resolved to IP address 172.66.44.96, with an SSL certificate issued by Google Trust Services (WE1). The page title displayed a warning from Cloudflare stating 'Suspected phishing site', indicating that the hosting provider had already flagged and taken the site offline. PhishDestroy's analysis confirms that this domain was created on March 29, 2026, and appeared on three security blocklists, with a total of 3 out of 95 security vendors on VirusTotal flagging it as malicious.

The evidence against this domain is clear and quantifiable. VirusTotal reports that 3 out of 95 security vendors flagged the domain, underscoring its malicious nature. The domain was registered through Cloudflare Pages, a common service used by phishers for its ease of deployment and free tier. Its creation date of March 29, 2026, suggests it was a recently established phishing campaign. Furthermore, the domain's presence on three security blocklists indicates that multiple threat intelligence sources have identified it as a risk. The current status is offline, meaning the hosting provider has taken action to disable the site, likely due to abuse reports or automated detection.

Users who visited o-fficial-exo-us-en.pages.dev should immediately take protective measures. If any personal information, such as login credentials, financial data, or personal identification numbers, was entered on the site, users should change those credentials on the legitimate platforms immediately and enable two-factor authentication where available. It is also advisable to monitor financial accounts for unauthorized transactions and run a full security scan on any devices used to access the site. PhishDestroy recommends reporting the domain to relevant authorities and checking for any signs of identity theft. Staying vigilant against similar phishing domains that mimic trusted services is crucial, as cybercriminals frequently use such tactics to harvest sensitive data.