# official-exo-us-io.pages.dev — SUSPICIOUS

> Beware: official-exo-us-io.pages.dev hosts a fake tech support scam. VirusTotal shows 0/95 detections. Check the full report.

## Summary
PhishDestroy identifies official-exo-us-io.pages.dev as a live tech support scam site masquerading as an EXO product portal. The domain resolves to IP 188.114.97.3 and leverages a Google Trust Services SSL certificate to appear legitimate. Despite zero detections on VirusTotal at the time of analysis, the page mimics official EXO-branded support pages to harvest payment credentials and personal data from unsuspecting users.

This domain was flagged through Cloudflare, Inc. using a Pages.dev subdomain structure commonly abused for rapid deployment of phishing campaigns. With zero detections on VirusTotal and no inclusion on major blocklists at the time of discovery, the threat evades many automated detection systems. The site’s infrastructure, including the use of Google’s trusted certificate, increases its credibility to potential victims, making it a high-risk vector for credential theft and fraud.

If you visited official-exo-us-io.pages.dev, cease all interaction immediately and revoke any credentials entered. Clear browser cache and cookies associated with the domain, then run a full antivirus scan. Report the domain to your email provider, browser, and security vendors. Consider enabling multi-factor authentication (MFA) on all critical accounts and monitor financial statements for unauthorized activity. For further analysis, access the full threat report linked in this advisory.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/63e5a438-eb70-4cf5-b77d-f2c14665279f
- PhishDestroy: https://phishdestroy.io/domain/official-exo-us-io.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/official-exo-us-io.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/official-exo-us-io.pages.dev/
Last updated: 2026-03-21