exo-dcausweb[.]pages[.]dev

The domain exo-dcausweb.pages.dev has been identified as a confirmed phishing site, designed to deceive users into revealing sensitive information. This threat is classified as generic phishing, meaning it does not target a specific brand but rather employs broad social engineering tactics. The domain was found to be hosting a fraudulent page that triggered Cloudflare's phishing warning, displaying the title "Suspected phishing site | Cloudflare." No specific drainer kit or brand impersonation was identified in the available intelligence.

Technical indicators paint a clear picture of malicious intent. VirusTotal data shows that 10 out of 95 security vendors flagged this domain as malicious, indicating widespread detection across the cybersecurity community. The domain was created on October 27, 2025, a very recent date that aligns with typical phishing operations using fresh domains to evade blocklists. It was registered through Cloudflare, Inc. and resolves to IP address 188.114.96.3. Google Safe Browsing also flags the domain for phishing activity. Additionally, the domain appears on one security blocklist, further corroborating its dangerous nature. The SSL certificate was issued by Google Trust Services (WE1), which is common for legitimate sites but does not guarantee safety.

The current status of exo-dcausweb.pages.dev is offline, indicating that it has been taken down, likely due to reports or automated takedown processes. This is a positive outcome, but users should remain vigilant as similar domains may appear. PhishDestroy recommends that anyone who interacted with this domain change passwords and enable two-factor authentication on affected accounts. Although the site is no longer active, the risk of credential harvesting persists if users reused passwords elsewhere. Always verify URLs before entering personal data and rely on security tools like Google Safe Browsing and VirusTotal for real-time protection.