# exo--dusweb3.pages.dev — SUSPICIOUS

> exo--dusweb3.pages.dev hosts a fake cryptocurrency wallet phishing page. 1 detection on VirusTotal. Check the full report.

## Summary
PhishDestroy identifies the domain exo--dusweb3.pages.dev as a live cryptocurrency-wallet phishing page currently under investigation.

This domain was flagged for hosting a generic crypto-wallet phishing lure. Key telemetry confirms the following: the page carries a Google Trust Services SSL certificate, was registered through Cloudflare, Inc., resolves to IP 188.114.96.3, and shows zero detections on VirusTotal as of the latest scan (0/95 engines). No blocklist entries or reputation penalties have been recorded to date.

Mitigation for this crypto-wallet phishing campaign should focus on blocking the domain at DNS and perimeter levels, inspecting outbound TLS traffic to 188.114.96.3, and raising user awareness about verifying wallet-interface URLs before entering private keys or seed phrases. Immediate takedown requests should be filed with both Cloudflare and the hosting provider using the seed reference 5cf763.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/5adce965-bc73-416e-ab9f-40b3c4c0cef9
- PhishDestroy: https://phishdestroy.io/domain/exo--dusweb3.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/exo--dusweb3.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/exo--dusweb3.pages.dev/
Last updated: 2026-03-21