# exod-sweb-doc.pages.dev — MALICIOUS > Explore the safety of exod-sweb-doc.pages.dev and learn why this Cloudflare-hosted site is under investigation for phishing risks. ## Summary PhishDestroy identifies exod-sweb-doc.pages.dev as an active site under investigation for generic phishing threats, with its risk level currently undetermined. Though VirusTotal reports zero detections, the domain is registered through Cloudflare and hosted on IP 172.66.47.93. The page title indicates suspicion of phishing, prompting caution despite no direct vendor flags. Users should remain vigilant and avoid sharing sensitive data on this site. PhishDestroy continues to monitor its status as investigations proceed. ## Threat Details - Verdict: MALICIOUS - Site status: dead (HTTP 403) - Page title: Suspected phishing site | Cloudflare ## Domain Intelligence - Registered: 2026-03-09 13:07:02 - Registrar: Cloudflare, Inc. - Country: US - IP: 172.66.47.93 - IP Country: US - IP City: San Francisco - IP Org: AS13335 Cloudflare, Inc. - Nameservers: cartman.ns.cloudflare.com magnolia.ns.cloudflare.com - SSL Issuer: Google Trust Services / WE1 ## Detection Status - VirusTotal: 7 vendors flagged Vendors: ["ADMINUSLabs", "ChainPatrol", "CyRadar", "ESET", "Fortinet", "Phishing Database", "Sophos"] - Google Safe Browsing: clean - Blocklists: 2 hits Lists: ["PhishDestroy", "MetaMask"] ## Evidence - Screenshot: https://urlscan.io/screenshots/019cd26b-d6f0-7255-99eb-bb56e6f06559.png - Cloudflare Radar: https://radar.cloudflare.com/scan/0ffbd353-2b18-4f09-b9e1-513b2d2324e7 - PhishDestroy: https://phishdestroy.io/domain/exod-sweb-doc.pages.dev/ - LLM endpoint: https://phishdestroy.io/domain/exod-sweb-doc.pages.dev/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/exod-sweb-doc.pages.dev/ Last updated: 2026-03-19