# install-exo-dss.pages.dev — SUSPICIOUS > Discover the risks of install-exo-dss.pages.dev, an active phishing site. Learn how this domain operates and protect yourself today. ## Summary PhishDestroy identifies install-exo-dss.pages.dev as an active phishing domain designed to deceive users into divulging sensitive information. Classified under generic phishing threats, this domain employs social engineering tactics typical of credential harvesting campaigns. The investigation is seeded with unique identifier d07e4c to ensure distinct tracking and analysis. Technically, install-exo-dss.pages.dev is registered through Cloudflare, Inc., a common choice for phishing infrastructure due to its proxy services. The domain resolves to IP address 172.66.47.107 and has been flagged by 3 out of 95 security vendors on VirusTotal, indicating a moderate level of detection. The domain’s use of the Cloudflare Pages platform suggests a tactic to evade direct hosting scrutiny and enhance its availability. Currently, the domain status remains active and monitored by PhishDestroy. Users are advised to avoid interaction, as the phishing operation could lead to credential theft or other forms of fraud. Security teams should consider blocking or further investigating this domain in their threat feeds to mitigate potential impact. ## Threat Details - Verdict: SUSPICIOUS - Site status: alive (HTTP 403) ## Domain Intelligence - Registrar: Cloudflare, Inc. - Country: US - IP: 172.66.47.107 - Nameservers: duke.ns.cloudflare.com janet.ns.cloudflare.com ## Detection Status - VirusTotal: 3 vendors flagged Vendors: ["ChainPatrol", "LevelBlue", "Phishing Database"] - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Screenshot: https://i.ibb.co/TJsYc0K/881c4f9162c5.png - Cloudflare Radar: https://radar.cloudflare.com/scan/cc55e336-2b5a-43ef-85c3-45c6220fa133 - PhishDestroy: https://phishdestroy.io/domain/install-exo-dss.pages.dev/ - LLM endpoint: https://phishdestroy.io/domain/install-exo-dss.pages.dev/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/install-exo-dss.pages.dev/ Last updated: 2026-03-19