exosdeuswebq[.]pages[.]dev

PhishDestroy identifies exosdeuswebq.pages.dev as a generic phishing domain suspected of hosting a crypto drainer kit. The page is not linked to a known brand, suggesting a standalone lure designed to trick users into connecting wallets and signing malicious transactions. Hosted on Cloudflare Pages, the domain leverages legitimate infrastructure to evade detection and deliver its payload through obfuscated JavaScript commonly associated with crypto-draining campaigns. This domain was flagged with a VirusTotal score of 0/95 detections, indicating it remains undetected by most antivirus engines as of the latest scan. It is registered through Cloudflare, Inc., resolving to IP address 188.114.97.3, and secured with a Google Trust Services SSL certificate. While the exact creation date is not confirmed, indicators suggest recent deployment targeting cryptocurrency users. As of the current assessment, exosdeuswebq.pages.dev remains active and under investigation with a risk level classified as 'under_investigation'. No blocklist entries have been recorded yet. Users are strongly advised to avoid interacting with this domain and to verify any suspicious links using PhishDestroy’s real-time scanning tool. The absence of detections highlights the need for proactive monitoring, as threat actors frequently rotate domains to sustain their operations.