# home-exo-dx-en.pages.dev — SUSPICIOUS

> home-exo-dx-en.pages.dev hosts active Microsoft 365 phishing pages. VirusTotal flags it: 3 of 95 vendors detected. Check the full report.

## Summary
PhishDestroy identifies the domain home-exo-dx-en.pages.dev as hosting an active Microsoft 365 phishing campaign designed to steal corporate credentials.  The domain resolves to IP address 188.114.97.3 and is currently flagged by 3 of 95 VirusTotal security vendors. It was registered through Cloudflare, Inc. and leverages a Google Trust Services SSL certificate to appear legitimate. While the creation date remains unverified in public records, the combination of hosting infrastructure and detection metrics suggests recent malicious deployment.  Despite a relatively low detection rate on VirusTotal, the presence of a valid SSL certificate and Cloudflare hosting lends credibility to the phishing lure. This domain should be considered elevated risk due to its active status and targeting of enterprise users. Organizations are advised to block this domain at the firewall and DNS level and to investigate any recent failed login attempts to Microsoft 365 services originating from or related to this domain.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 3 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/38f8df14-5a8b-4de5-bc05-35961a1e687e
- PhishDestroy: https://phishdestroy.io/domain/home-exo-dx-en.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/home-exo-dx-en.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/home-exo-dx-en.pages.dev/
Last updated: 2026-03-22