# ex--xodus-doc.pages.dev — SUSPICIOUS

> ex--xodus-doc.pages.dev was identified as a medium-risk phishing site. Now offline, learn what made it a threat and stay protected.

## Summary
PhishDestroy identifies ex--xodus-doc.pages.dev as a medium-risk phishing domain used to deceive users, potentially capturing sensitive information. The domain’s suspicious nature triggered detection on multiple blocklists.

The domain was registered on March 12, 2026, through Cloudflare, Inc. It resolved to IP 188.114.96.3 and was flagged by 3 out of 95 security vendors on VirusTotal. The domain appeared on two security blocklists, indicating active monitoring by security communities.

Currently, the domain is offline and inaccessible, reducing immediate risk. Users and organizations are advised to remain vigilant for similar phishing attempts and ensure email and web filters are updated to block related threats.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-03-12 23:07:01
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: lucy.ns.cloudflare.com vern.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["ChainPatrol", "Fortinet", "Phishing Database"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019ce3f6-b344-72ec-aed0-b30e5f4ef56f.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/04ad1a1b-f8af-4d5d-92ce-ee12502f8436
- PhishDestroy: https://phishdestroy.io/domain/ex--xodus-doc.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ex--xodus-doc.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ex--xodus-doc.pages.dev/
Last updated: 2026-03-19