us--exxodus-web[.]pages[.]dev
“Suspected phishing site | Cloudflare”
Pengamatan tersimpan
Perbedaan judul yang diamati
Ringkasan bukti
The domain us--exxodus-web.pages.dev was observed hosting a page whose title reads "Suspected phishing site | Cloudflare". The site resolved to the IP address 172.66.47.156, which is owned by Cloudflare, Inc. (AS13335) and is geolocated to the United States. Cloudflare’s DNS records show the authoritative nameservers lia.ns.cloudflare.com and ram.ns.cloudflare.com, confirming that the domain is fully provisioned through Cloudflare’s platform. Technical fingerprints indicate the presence of HTTP/3 and enforced HTTP Strict Transport Security (HSTS), both standard Cloudflare features. Security telemetry flags the domain as high‑risk.
The Gridinsoft trust score is 0 out of 100, indicating a lack of trust. Fifteen of ninety‑four VirusTotal scanners have flagged the domain, and the site appears on three independent blocklists, including PhishDestroy, MetaMask, and SEAL. The HTTP response returned a 403 status code before the site was taken offline, suggesting that access was blocked or the content was removed. The current status is listed as offline, and the domain is no longer reachable. Evidence does not reveal the specific phishing kit or targeted brand beyond the generic page title.
No additional intelligence such as OTX identifiers, Safe Browsing alerts, or detailed payload analysis is available. Consequently, the precise lure or victim profile remains uncertain. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any re‑registration or new sub‑domains under the same parent zone, and update endpoint protection signatures to include the observed VirusTotal detections. Given the Cloudflare hosting, any future re‑hosting is likely to retain the same IP range, so IP‑based allow‑list rules should be reviewed. Continuous observation of the domain’s registration status is recommended, as the registrar information shows the domain was registered through Cloudflare, Inc., which may facilitate rapid redeployment.
Data Coverage
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Quad9 DNS | us--exxodus-web.pages.dev |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 12/08/2026
8 sumber eksternal dipantau Tidak cocok
Teknologi
3 teknologi dengan keyakinan tinggi teridentifikasi
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of us--exxodus-web.pages.dev · checked Mar 16, 2026
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive