# ex-duses-se.pages.dev — SUSPICIOUS

> Ex-duses-se.pages.dev is a phishing domain impersonating a legitimate service with a Cloudflare-hosted kit.

## Summary
PhishDestroy identifies ex-duses-se.pages.dev as an active phishing domain hosting a generic credential-stealing kit. This domain, registered through Cloudflare, Inc., resolves to IP 188.114.97.3 and operates under a Google Trust Services SSL certificate to appear legitimate. The threat poses significant risk to users tricked into entering sensitive login details, as it mimics a trusted service interface to harvest credentials.  This domain was flagged by only 1 out of 95 VirusTotal security vendors, highlighting the challenge of early detection for novel phishing infrastructures. The domain leverages Cloudflare's Pages.dev platform, a legitimate service, to host its malicious payload while obscuring its true origin. Such tactics increase the likelihood of bypassing traditional email and web filtering systems.  If you visited ex-duses-se.pages.dev, immediately change passwords for any accounts entered on the site and enable multi-factor authentication where available. Scan your device for malware using reputable antivirus software and monitor accounts for unusual activity. Report the domain to your IT/security team or use browser tools to flag it as malicious. Avoid interacting with unexpected login prompts, even if they appear legitimate, to prevent credential theft and account compromise.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/108d4ede-1739-4801-a4c4-b2a8af4cf7b1
- PhishDestroy: https://phishdestroy.io/domain/ex-duses-se.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ex-duses-se.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ex-duses-se.pages.dev/
Last updated: 2026-03-23