en-web3-exo-ds[.]pages[.]dev

The domain en-web3-exo-ds.pages.dev is a generic phishing site designed to deceive users in a DeFi scam, with no specific brand impersonation or drainer kit identified. As of the latest verification, en-web3-exo-ds.pages.dev has been taken offline, but it previously posed an elevated risk of credential theft or fraudulent transactions targeting cryptocurrency users. Users searching whether en-web3-exo-ds.pages.dev is safe or a scam should treat it as malicious based on observed behavior and detection by security vendors.

Technical indicators confirm the suspicious nature of en-web3-exo-ds.pages.dev. The domain was flagged by 1 of 95 VirusTotal vendors, including Ermes, and appears on 1 security blocklist (PhishDestroy). Registered through Cloudflare, Inc. on February 21, 2026, it resolved to the IP address 172.66.47.24, hosted by Cloudflare in the US. The SSL certificate was issued by Google Trust Services / WE1, and the observed page title was 'Suspected phishing site | Cloudflare'. Technologies detected include HSTS, Cloudflare, and HTTP/3, with a Gridinsoft trust score of 0/100.

Users who interacted with en-web3-exo-ds.pages.dev should assume potential exposure and take immediate action. For cryptocurrency-related phishing, revoke any token approvals granted to suspicious contracts and transfer funds to a new wallet. If credentials were entered, change passwords for all affected accounts, enable two-factor authentication, and monitor for unauthorized transactions. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in broader mitigation efforts.