# exod-web3-s.pages.dev — SUSPICIOUS

> exod-web3-s.pages.dev is a medium-risk phishing domain currently offline. Avoid interacting with this site to protect your credentials.

## Summary
PhishDestroy identifies exod-web3-s.pages.dev as a phishing domain involved in generic phishing activities with a medium risk level. The domain was flagged due to attempts to deceive users, potentially to harvest sensitive information. This threat was notable enough to appear on three separate security blocklists, indicating a recognized risk to users encountering it.

The domain exod-web3-s.pages.dev was registered on March 4, 2026, through Cloudflare, Inc. It resolved to the IP address 188.114.97.3 during its active period. VirusTotal scans reported by PhishDestroy show that 3 out of 95 security vendors detected malicious activity associated with this domain. The page title returned when accessed was "Suspected phishing site | Cloudflare," corroborating the domain’s malicious intent.

Currently, exod-web3-s.pages.dev is offline and no longer resolves, which reduces immediate risk. However, users and organizations should remain vigilant and block or filter this domain proactively to prevent phishing attempts should the domain or similar variants reappear. Monitoring security feeds and updating phishing protection tools with this domain information is recommended to enhance defensive measures.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-03-04 15:07:01
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 188.114.97.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: chelsea.ns.cloudflare.com kyree.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["ChainPatrol", "Fortinet", "Phishing Database"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cb913-eba0-7428-9453-db8168a7c83a.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/180c93b9-3978-4673-827d-056b3c19e009
- Wayback Machine: https://web.archive.org/web/https://exod-web3-s.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/exod-web3-s.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/exod-web3-s.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/exod-web3-s.pages.dev/
Last updated: 2026-03-19