# web3--exo-eng.pages.dev — SUSPICIOUS

> web3--exo-eng.pages.dev flagged for medium-risk generic phishing. Domain is offline after appearing on multiple blocklists. Learn the details here.

## Summary
PhishDestroy identifies web3--exo-eng.pages.dev as a medium-risk domain involved in generic phishing activities. The domain was specifically flagged for attempting to deceive users through fraudulent means.

Supporting evidence includes its appearance on three separate security blocklists and detection by 3 out of 95 VirusTotal security vendors. The domain was registered through Cloudflare, Inc. and resolved to IP address 188.114.97.3. The page title detected was “Suspected phishing site | Cloudflare,” further confirming malicious intent.

Currently, web3--exo-eng.pages.dev is offline and no longer resolves, mitigating ongoing risk. Users and organizations should continue to block this domain and monitor for related threats. This case underscores the importance of timely security response to newly created suspicious domains, as this one was registered recently on March 4, 2026.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-03-04 15:07:01
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 188.114.97.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: dorthy.ns.cloudflare.com piotr.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["ChainPatrol", "Fortinet", "Phishing Database"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cb913-67c3-71b8-81fc-07fccb29c18c.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/76d551b7-8de1-4d41-9e05-5d39c34e8e12
- Wayback Machine: https://web.archive.org/web/https://web3--exo-eng.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/web3--exo-eng.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/web3--exo-eng.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/web3--exo-eng.pages.dev/
Last updated: 2026-03-19