# portal-us-suhiswp-exchage.pages.dev — SUSPICIOUS

> portal-us-suhiswp-exchage.pages.dev hosts a credential theft phishing page mimicking a US-based service. Detected via VirusTotal: 0/95 engines flagged.

## Summary
PhishDestroy identifies an active credential theft campaign linked to portal-us-suhiswp-exchage.pages.dev. This domain is currently under investigation as a suspected phishing page designed to harvest user credentials under the guise of a legitimate service. The presence of 0 detections on VirusTotal (0/95) suggests the domain remains undetected by most antivirus engines, increasing the risk of successful exploitation by threat actors. The domain leverages Cloudflare’s infrastructure and Google Trust Services for SSL certificates, adding a veneer of legitimacy that may deceive users unfamiliar with the red flags of phishing pages.  This domain was flagged with a risk level of under_investigation and is linked to IP 172.66.44.238 via Cloudflare. The domain is registered through Cloudflare, Inc., and is hosted on Google Trust Services’ SSL infrastructure, which may contribute to its perceived trustworthiness. Currently, there are no known detections on VirusTotal, no reports on public blocklists, and no historical data suggesting prior malicious activity. The domain’s age and recent creation date, combined with its use of legitimate infrastructure, create a challenging detection environment for both users and automated systems.  To mitigate the risk of credential theft, users should avoid interacting with this domain or any linked pages. Verify the legitimacy of URLs through official channels, such as directly contacting the purported service provider. Enable multi-factor authentication (MFA) on all accounts, especially those associated with financial or sensitive data, to reduce the impact of credential compromise. Report this domain to your IT security team or relevant authorities if encountered in an organizational context. For personal use, consider using browser-based phishing protection tools or reputable URL scanning services to validate suspicious links before engagement.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.44.238

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/portal-us-suhiswp-exchage.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/portal-us-suhiswp-exchage.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/portal-us-suhiswp-exchage.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/portal-us-suhiswp-exchage.pages.dev/
Last updated: 2026-04-05