exxodus--web[.]pages[.]dev
Pemeriksaan phishing dan keamanan exxodus--web.pages.dev
“exxodus--web.pages.dev”
exxodus--web.pages.dev — Dapat dijangkau · akses dibatasi (HTTP 403). Jenis penipuan: Credential Phishing. Ringkasan bukti: VirusTotal 13/94 (ADMINUSLabs, ChainPatrol, alphaMountain.ai, BitDefender, CyRadar); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 94/100. Registrar: Cloudflare.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of exxodus--web.pages.dev, observed as a credential‑phishing site, shows that the domain was registered on September 18 2025 through Cloudflare, Inc. The authoritative nameservers are nucum.ns.cloudflare.com and sage.ns.cloudflare.com, both belonging to Cloudflare’s DNS infrastructure. DNS resolution points to the IP address 172.66.44.212, which is announced by AS13335, the Cloudflare network, and geolocated to the United States. The TLS certificate presented is issued by Google Trust Services, confirming the use of a legitimate, publicly trusted certificate chain. HTTP responses return a 403 status code, and the server advertises HSTS and HTTP/3, indicating a modern Cloudflare edge configuration.
Reputation data is strongly negative: Gridinsoft assigns a trust score of 0 / 100, and the domain appears on three independent security blocklists. It is actively blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal analysis reports that 13 of 94 scanning engines have flagged the domain, reinforcing the malicious assessment. The page title returned by the server is identical to the domain name, providing no additional context.
The primary threat classification is credential phishing, though the specific targeted service or brand is not disclosed in the collected metadata. The site is currently taken offline, which limits real‑time observation but does not remove the historical risk. Defenders should continue to block the domain at DNS and proxy layers, monitor for any re‑registration or re‑use of the same IP space, and update detection signatures to incorporate the observed HSTS/HTTP‑3 fingerprint and the Cloudflare‑issued certificate details. Additional investigation may be required to locate any associated phishing landing pages or payloads that were previously hosted under this domain.
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Teknologi · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Keyakinan 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Keyakinan 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Keyakinan 100%Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of exxodus--web.pages.dev · checked Mar 16, 2026
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive