en-us-exdoos[.]pages[.]dev

Analysis of en-us-exdoos.pages.dev indicates that the domain is actively used for generic phishing campaigns as of the report date, July 29 2026. The domain resolves to the IPv4 address 172.66.44.215 and is hosted behind Cloudflare, Inc., as evidenced by the registrar information and the authoritative name servers asa.ns.cloudflare.com and maciej.ns.cloudflare.com. VirusTotal scans have recorded detections from 11 of 91 security vendors, confirming that a subset of industry scanners recognize malicious activity associated with this host.

The domain is listed on at least one external security blocklist and is actively blocked by the PhishDestroy mitigation service, reinforcing its classification as a threat. No public page title or SSL certificate details have been disclosed, and HTTP response codes have not been reported, leaving the exact content and presentation of the site unverified. Consequently, defenders should treat any traffic to en-us-exdoos.pages.dev as hostile, enforce DNS‑based blocking, and incorporate the IP address 172.66.44.215 into network‑level deny lists.

Continuous monitoring of the domain’s resolution and reputation scores is recommended, as changes in detection counts or additional blocklist entries may signal escalation or new payload deployment. Organizations using web filtering should ensure that the domain is included in URL filtering policies, and incident response teams should be prepared to investigate any credential or credential‑like data submissions that may be directed to this infrastructure.