# ex-xodus-doc.pages.dev — SUSPICIOUS

> ex-xodus-doc.pages.dev is a suspected phishing domain now offline. Avoid sharing personal info and delete any messages linked to this site immediately.

## Summary
PhishDestroy identifies ex-xodus-doc.pages.dev as a low-risk phishing domain that has been taken offline. Although only 2 of 95 security vendors flagged it and it appears on 2 blocklists, users should remain cautious about such sites.

This phishing domain was created on March 04, 2026, and registered through Cloudflare, Inc. It may have attempted to trick users into revealing sensitive information by impersonating trusted entities or delivering deceptive content.

If you visited ex-xodus-doc.pages.dev, do not enter any personal or financial data. Run a security scan on your device and change passwords if you believe your credentials were exposed. Always verify URLs before interacting with unfamiliar sites.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-03-04 23:07:01
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 188.114.97.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: lucy.ns.cloudflare.com sullivan.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["ChainPatrol", "Phishing Database"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cbaeb-f3e5-766a-af85-3f9bb74c36db.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/ex-xodus-doc.pages.dev
- Wayback Machine: https://web.archive.org/web/https://ex-xodus-doc.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/ex-xodus-doc.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/ex-xodus-doc.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/ex-xodus-doc.pages.dev/
Last updated: 2026-03-19