# docexo-d-usweb.pages.dev — SUSPICIOUS

> The domain docexo-d-usweb.pages.dev is linked to phishing attempts. Users should avoid interaction and report suspicious activity immediately.

## Summary
PhishDestroy has classified the domain docexo-d-usweb.pages.dev as a medium-risk generic phishing threat. This designation stems from its association with deceptive practices aimed at stealing user credentials or sensitive information.

The domain was created recently, on March 4, 2026, and is registered through Cloudflare, Inc. It appeared on three security blocklists and was flagged by three security vendors on VirusTotal out of 95 scanned. The domain resolved to IP address 172.66.44.80 and was hosted on Cloudflare's infrastructure. The page title encountered reads "Suspected phishing site | Cloudflare," further reinforcing its malicious intent.

Currently, the domain is offline, reducing immediate risk to users. PhishDestroy advises caution: avoid visiting the domain or providing any personal data if encountered. Users should keep their security software updated and report any phishing attempts linked to this domain to their IT or security teams. Continued monitoring is recommended to detect any potential reactivation or related threats.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-03-04 15:07:01
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.44.80
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: clint.ns.cloudflare.com jean.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["ChainPatrol", "Fortinet", "Phishing Database"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cb914-1602-7660-b359-baac03234687.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/f6ea06a6-35ea-4ca8-aa4a-973b2537dc31
- Wayback Machine: https://web.archive.org/web/https://docexo-d-usweb.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/docexo-d-usweb.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/docexo-d-usweb.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/docexo-d-usweb.pages.dev/
Last updated: 2026-03-19