# home-exox-en.pages.dev — SUSPICIOUS > home-exox-en.pages.dev flagged for Netflix credential phishing. 3 of 95 VirusTotal vendors detected threats. Check the full report. ## Summary PhishDestroy identifies home-exox-en.pages.dev as an active Netflix account phishing domain. The site is currently operational and mimics the official Netflix login portal to harvest user credentials. Security researchers and users should treat this domain as a confirmed phishing resource and avoid interaction. This domain was flagged by 3 of 95 VirusTotal security vendors, indicating elevated risk despite low detection volume. It resolves to IP 172.66.44.141, is registered through Cloudflare, Inc., and secured using a Google Trust Services SSL certificate. The page is hosted on Cloudflare Pages, a legitimate platform often abused for phishing due to its speed and anonymity features. Given the confirmed phishing activity and low detection rate, PhishDestroy assesses this domain as a HIGH-RISK threat to users seeking to access Netflix or similar services. Immediate actions include blocking the domain at the network and endpoint levels, reporting to Netflix’s abuse team, and updating browser and DNS-based blocklists. Users who may have entered credentials should change their Netflix password immediately and enable two-factor authentication. Security teams should monitor for related domains and phishing kits leveraging similar infrastructure patterns. ## Threat Details - Verdict: SUSPICIOUS - Site status: unknown (HTTP ?) ## Domain Intelligence - Registrar: Cloudflare, Inc. - IP: 172.66.44.141 ## Detection Status - VirusTotal: 3 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/12d05e11-278c-4a34-8754-ddfb093ceb64 - PhishDestroy: https://phishdestroy.io/domain/home-exox-en.pages.dev/ - LLM endpoint: https://phishdestroy.io/domain/home-exox-en.pages.dev/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/home-exox-en.pages.dev/ Last updated: 2026-03-22