# en-exodua-io-web.pages.dev — SUSPICIOUS

> en-exodua-io-web.pages.dev is linked to low-risk phishing attempts. Avoid sharing personal info and stay cautious when visiting this domain.

## Summary
PhishDestroy identifies en-exodua-io-web.pages.dev as an active phishing domain with a low risk level. While only one out of 95 security vendors flagged it on VirusTotal, this domain poses a potential threat by attempting to trick users into revealing sensitive information through deceptive tactics.

This phishing campaign typically involves impersonating legitimate services or websites hosted under the Cloudflare platform, aiming to lure victims into submitting personal or financial data. The site resolves to the IP address 188.114.96.3 and uses a domain structure designed to appear trustworthy, which can mislead users unfamiliar with such attacks.

If a user has visited en-exodua-io-web.pages.dev, it is advised to avoid entering any credentials or private details. Users should run thorough security scans on their devices and monitor accounts for unusual activity. Staying vigilant and verifying URLs carefully can help mitigate risks from these low-level phishing attempts.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-03-06 21:07:02
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: aisha.ns.cloudflare.com chip.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["ChainPatrol", "Trustwave"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc48e-abe7-7199-8071-ff0144f7c0e1.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/eb92976e-551e-4a87-abca-cdc802e10376
- Wayback Machine: https://web.archive.org/web/https://en-exodua-io-web.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/en-exodua-io-web.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/en-exodua-io-web.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/en-exodua-io-web.pages.dev/
Last updated: 2026-03-19