# suport-exdoua-web.pages.dev — SUSPICIOUS

> PhishDestroy identifies suport-exdoua-web.pages.dev as a crypto drainer phishing site, flagged by 2 of 95 VirusTotal vendors.

## Summary
PhishDestroy identifies suport-exdoua-web.pages.dev as an active crypto drainer phishing domain impersonating legitimate support services, currently classified with an elevated risk status. This malicious site mimics official web portals to trick users into connecting crypto wallets and draining funds, posing a significant threat to cryptocurrency holders.  

This domain was flagged by 2 of 95 VirusTotal security vendors, registered through Cloudflare, Inc., and resolves to IP 172.66.45.28. The site operates under a Google Trust Services SSL certificate, which increases its appearance of legitimacy despite its malicious intent. While the VirusTotal detection rate remains low (2/95), the presence of a crypto drainer payload indicates active exploitation targeting unsuspecting users.  

Given its confirmed malicious activity and low detection rate, PhishDestroy strongly advises users to avoid interacting with suport-exdoua-web.pages.dev entirely. Verify any suspicious links using PhishDestroy’s real-time threat intelligence tools before proceeding. Users who have already visited this domain should disconnect their wallets, revoke any connected permissions, and scan their devices for malware. Cloudflare’s infrastructure may hinder takedown efforts, so caution and proactive verification are critical to preventing financial loss.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 172.66.45.28

## Detection Status
- VirusTotal: 2 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/f9a6be76-b1bd-4709-b463-fb339d4911d2
- PhishDestroy: https://phishdestroy.io/domain/suport-exdoua-web.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/suport-exdoua-web.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/suport-exdoua-web.pages.dev/
Last updated: 2026-03-22