us--exxodus-web[.]pages[.]dev
“Suspected phishing site | Cloudflare”
Osservazione memorizzata
Contrasto dei titoli osservato
Riepilogo delle prove
The domain us--exxodus-web.pages.dev was observed hosting a page whose title reads "Suspected phishing site | Cloudflare". The site resolved to the IP address 172.66.47.156, which is owned by Cloudflare, Inc. (AS13335) and is geolocated to the United States. Cloudflare’s DNS records show the authoritative nameservers lia.ns.cloudflare.com and ram.ns.cloudflare.com, confirming that the domain is fully provisioned through Cloudflare’s platform. Technical fingerprints indicate the presence of HTTP/3 and enforced HTTP Strict Transport Security (HSTS), both standard Cloudflare features. Security telemetry flags the domain as high‑risk.
The Gridinsoft trust score is 0 out of 100, indicating a lack of trust. Fifteen of ninety‑four VirusTotal scanners have flagged the domain, and the site appears on three independent blocklists, including PhishDestroy, MetaMask, and SEAL. The HTTP response returned a 403 status code before the site was taken offline, suggesting that access was blocked or the content was removed. The current status is listed as offline, and the domain is no longer reachable. Evidence does not reveal the specific phishing kit or targeted brand beyond the generic page title.
No additional intelligence such as OTX identifiers, Safe Browsing alerts, or detailed payload analysis is available. Consequently, the precise lure or victim profile remains uncertain. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any re‑registration or new sub‑domains under the same parent zone, and update endpoint protection signatures to include the observed VirusTotal detections. Given the Cloudflare hosting, any future re‑hosting is likely to retain the same IP range, so IP‑based allow‑list rules should be reviewed. Continuous observation of the domain’s registration status is recommended, as the registrar information shows the domain was registered through Cloudflare, Inc., which may facilitate rapid redeployment.
Data Coverage
Informazioni sulla sicurezza di rete
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Quad9 DNS | us--exxodus-web.pages.dev |
malicious | Sinkholed |
Pipeline di risposta alle minacce
Copertura delle blocklist
10 fonti esterne monitorate · snapshot del 11/08/2026
8 fonti esterne monitorate Nessuna corrispondenza
Tecnologie
3 tecnologie identificate con alta affidabilità
Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of us--exxodus-web.pages.dev · checked Mar 16, 2026
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo