cloud-exo-us[.]pages[.]dev

The domain cloud-exo-us.pages.dev was a generic phishing site designed to harvest user credentials through credential phishing tactics. It did not impersonate a specific brand or deploy a known drainer kit. As of the latest verification, cloud-exo-us.pages.dev has been taken offline and is no longer accessible.

Technical indicators confirm the elevated risk level of this phishing domain. VirusTotal reported 1 of 95 security vendors flagged cloud-exo-us.pages.dev, while Google Safe Browsing did not detect it. The domain appeared on 3 security blocklists, including PhishDestroy, MetaMask, and SEAL. Registered through Cloudflare, Inc. on October 28, 2025, it resolved to the IP address 188.114.97.3, hosted by Cloudflare in Canada. The SSL certificate was issued by Google Trust Services / WE1, and the observed page title was 'Suspected phishing site | Cloudflare'. Technologies detected included HSTS, Cloudflare, and HTTP/3, with a Gridinsoft trust score of 0/100.

Users who interacted with cloud-exo-us.pages.dev should immediately change any passwords entered on the site and enable two-factor authentication (2FA) on affected accounts to prevent unauthorized access. Monitor accounts for suspicious activity, such as unauthorized transactions or login attempts. Report the phishing domain to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to assist in broader mitigation efforts.