# exxo-das.pages.dev — MALICIOUS

> Explore the safety status of exxo-das.pages.dev, a suspected phishing domain currently under investigation. Stay informed to protect your data.

## Summary
PhishDestroy has identified exxo-das.pages.dev as a potentially harmful site linked to phishing activities. While this domain is still under investigation, users should exercise caution since phishing aims to trick visitors into divulging sensitive information such as passwords or financial details.

This suspicious domain was registered through Cloudflare, Inc. and resolves to the IP address 172.66.46.227. Despite a clean VirusTotal scan with zero detections, the site’s association with phishing is inferred from its page title and registration context, signaling that attackers might be impersonating trusted services to lure victims.

If you have accessed exxo-das.pages.dev, it’s recommended to avoid entering any personal data and run a thorough antivirus scan. Monitoring your accounts for unusual activity is also crucial. For ongoing safety, refrain from interacting with unknown links and report suspicious pages to authorities or security platforms like PhishDestroy.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-03-10 19:07:02
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.46.227
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: cruz.ns.cloudflare.com hunts.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 6 vendors flagged
  Vendors: ["ADMINUSLabs", "ChainPatrol", "Chong Lua Dao", "CyRadar", "Fortinet", "Phishing Database"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cd915-7940-71a0-8984-9ffe46cdb039.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/17adf9dc-a5ee-42ea-bcba-3b04637fe7ec
- PhishDestroy: https://phishdestroy.io/domain/exxo-das.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/exxo-das.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/exxo-das.pages.dev/
Last updated: 2026-03-19