# ex-oxdusweb.pages.dev — SUSPICIOUS

> ex-oxdusweb.pages.dev hosts a fake login page. VirusTotal shows 0/95 detections. Check the full report.

## Summary
PhishDestroy identifies ex-oxdusweb.pages.dev as an active fake login page designed to steal account credentials. The page mimics a legitimate login portal to trick users into entering sensitive information such as usernames and passwords. If entered, this data is captured by attackers for unauthorized access or sold on dark web markets. The domain leverages Cloudflare’s infrastructure and Google Trust Services SSL certificate to appear credible, but its purpose remains malicious.


This domain was flagged with 0 detections out of 95 VirusTotal engines, indicating it evades immediate detection despite its malicious intent. The site resolves to IP 172.66.47.3 and is registered through Cloudflare, Inc., which often hosts both legitimate and malicious content. Its low detection rate suggests it may be newly active or rapidly changing to avoid security tools.


If you visited ex-oxdusweb.pages.dev or entered any login details, immediately change your passwords on other accounts using the same credentials. Enable two-factor authentication where possible. Run a full antivirus scan on your device. Avoid interacting with the site further and report it to your security team or browser vendor. Always verify URLs and use password managers with built-in phishing detection to prevent credential theft.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.47.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/d1ea9be1-3713-401e-bf2b-68414b6e0fa6
- PhishDestroy: https://phishdestroy.io/domain/ex-oxdusweb.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ex-oxdusweb.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ex-oxdusweb.pages.dev/
Last updated: 2026-04-13