# en-exo-us.pages.dev — MALICIOUS

> Check the safety status of en-exo-us.pages.dev, a domain flagged for phishing activity. Learn about its current offline status and risk details here.

## Summary
PhishDestroy has identified en-exo-us.pages.dev as a medium-risk generic phishing domain. The domain was designed to deceive users by mimicking legitimate sites to harvest sensitive information, posing threats to online safety. This assessment is based on multiple indicators of malicious intent observed during analysis.

en-exo-us.pages.dev was registered on March 3, 2026, via Cloudflare, Inc. It resolves to the IP address 172.66.47.145. VirusTotal flagged this domain by five security vendors, and it currently appears on three security blocklists, reinforcing its suspicious nature. The domain was hosted on Cloudflare's infrastructure, utilizing the pages.dev subdomain service, which is often targeted for abuse due to ease of deployment.

The domain en-exo-us.pages.dev has been taken offline, reducing immediate risk to users. PhishDestroy recommends maintaining caution by avoiding access to this domain and similar new or suspicious pages.dev subdomains. Users should ensure their security solutions are updated and report any suspicious activity to their cybersecurity teams. Monitoring for any reappearance of this domain or related infrastructure is advised.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-03-03 23:07:02
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.47.145
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: carmelo.ns.cloudflare.com serena.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 5 vendors flagged
  Vendors: ["ADMINUSLabs", "ChainPatrol", "CyRadar", "Fortinet", "Kaspersky"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://i.ibb.co/DPGJ0ZL7/49d8e7f21af2.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/bbf86e43-832f-4528-af82-73381bc685b4
- Wayback Machine: https://web.archive.org/web/https://en-exo-us.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/en-exo-us.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/en-exo-us.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/en-exo-us.pages.dev/
Last updated: 2026-03-19