# web3-exo-eng.pages.dev — SUSPICIOUS

> Warning: web3-exo-eng.pages.dev is flagged for phishing. Exercise caution and avoid sharing personal details.

## Summary
PhishDestroy identifies web3-exo-eng.pages.dev as an active domain associated with generic phishing threats. This domain poses a medium risk to users, particularly those engaging with online transactions or sharing sensitive information. The classification as phishing indicates malicious intent, aiming to deceive individuals into providing personal or financial data under false pretenses.

The domain resolves to the IP address 188.114.96.3 and is registered through Cloudflare, Inc., a service often used for security and performance enhancements. However, it is crucial to note that such services can also be leveraged by malicious actors to mask their true identity and intentions. The use of Cloudflare may suggest an attempt to increase the domain's resilience against takedown attempts and to obscure its operational infrastructure, which raises further concerns regarding its legitimacy.

Currently, web3-exo-eng.pages.dev remains active, and users are advised to exercise extreme caution when interacting with it. PhishDestroy recommends avoiding any engagement with this domain until further investigation can confirm its safety. Individuals should remain vigilant and report any suspicious activity associated with this domain to relevant authorities to mitigate potential phishing attacks.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-03-04 15:07:01
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: corey.ns.cloudflare.com dora.ns.cloudflare.com
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["ChainPatrol", "Fortinet"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cb913-9565-75ac-9a9f-3b05517fbd24.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/3bd0b8de-71a3-4d36-b1b8-dfbc45200981
- Wayback Machine: https://web.archive.org/web/https://web3-exo-eng.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/web3-exo-eng.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/web3-exo-eng.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/web3-exo-eng.pages.dev/
Last updated: 2026-03-19