# en-xodus-cdn.pages.dev — SUSPICIOUS

> Check if en-xodus-cdn.pages.dev is safe to visit. PhishDestroy highlights potential phishing risks linked to this Cloudflare-hosted domain.

## Summary
PhishDestroy identifies en-xodus-cdn.pages.dev as a generic phishing threat with a low risk level. Phishing domains like this attempt to deceive users by mimicking legitimate sites, aiming to steal sensitive information such as login credentials or personal data. Although labeled low risk, vigilance is necessary since such sites can lead to financial or identity theft.

en-xodus-cdn.pages.dev resolves to the IP address 172.66.47.198 and is registered through Cloudflare, Inc. The domain currently displays a page title indicating suspicion of phishing activity, and VirusTotal data reveals that 2 out of 95 security scanners have flagged this domain. The use of Cloudflare's infrastructure suggests the domain benefits from CDN and proxy services, which can sometimes complicate attribution efforts.

Users are advised to avoid entering any personal or sensitive information on en-xodus-cdn.pages.dev. If you encounter this domain unexpectedly or via unsolicited links, it is safest to refrain from interacting with the site. Employ updated antivirus software, enable browser security features, and report suspicious domains to cybersecurity platforms like PhishDestroy for ongoing monitoring and awareness.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-03-09 13:07:02
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.47.198
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: johnny.ns.cloudflare.com treasure.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Ermes", "Trustwave"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cd26c-c0e8-7028-9cd8-a7ab6e9759cd.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/30441e0a-4f0d-42e2-bf44-78a3b5f8151c
- PhishDestroy: https://phishdestroy.io/domain/en-xodus-cdn.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/en-xodus-cdn.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/en-xodus-cdn.pages.dev/
Last updated: 2026-03-19