ex-oxdusweb[.]pages[.]dev

PhishDestroy identifies ex-oxdusweb.pages.dev as an active fake login page designed to steal account credentials. The page mimics a legitimate login portal to trick users into entering sensitive information such as usernames and passwords. If entered, this data is captured by attackers for unauthorized access or sold on dark web markets. The domain leverages Cloudflare’s infrastructure and Google Trust Services SSL certificate to appear credible, but its purpose remains malicious.

This domain was flagged with 0 detections out of 95 VirusTotal engines, indicating it evades immediate detection despite its malicious intent. The site resolves to IP 172.66.47.3 and is registered through Cloudflare, Inc., which often hosts both legitimate and malicious content. Its low detection rate suggests it may be newly active or rapidly changing to avoid security tools.

If you visited ex-oxdusweb.pages.dev or entered any login details, immediately change your passwords on other accounts using the same credentials. Enable two-factor authentication where possible. Run a full antivirus scan on your device. Avoid interacting with the site further and report it to your security team or browser vendor. Always verify URLs and use password managers with built-in phishing detection to prevent credential theft.