offical-exo-us-en[.]pages[.]dev

The domain offical-exo-us-en.pages.dev is a confirmed generic phishing site designed to harvest user credentials through credential phishing tactics. It does not impersonate a specific brand or employ a known drainer kit. As of the latest verification, offical-exo-us-en.pages.dev has been taken offline, though it previously posed an elevated risk to users who may have interacted with it.

Technical analysis shows that offical-exo-us-en.pages.dev was flagged by 2 of 95 security vendors on VirusTotal, including ChainPatrol and alphaMountain.ai. The domain was registered through Cloudflare, Inc. on February 26, 2026, and resolved to the IP address 172.66.45.31, hosted under AS13335 Cloudflare, Inc. in the US. It appeared on 3 security blocklists, including PhishDestroy, MetaMask, and SEAL. The SSL certificate was issued by Google Trust Services / WE1, and the observed page title was 'Suspected phishing site | Cloudflare'. Technologies detected included HSTS, Cloudflare, and HTTP/3, with an HTTP status of 403 returned at the time of assessment.

Users who may have entered credentials on offical-exo-us-en.pages.dev should immediately change passwords for any accounts accessed through the site and enable two-factor authentication where available. Monitor accounts for unauthorized activity and report any suspected fraud to relevant financial institutions or service providers. To report the phishing domain, submit it to platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group. Additionally, victims can notify their local cybercrime unit or consumer protection agency to assist in mitigating further risks.